Dirk Wetter

Remove spaces from certificates in JSON

1

Currently certificates in JSON output look like `` -----BEGIN CERTIFICATE----- MIIFXDCCBESgAw[..]foACzLsvA aJ2+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNV[..]eXB0MSMwIQYDVQQD ExpMZXQnc[..] `` As a convenience feature it would be great of the spaces in the certificate string...

* Maybe Take expiration of host certificate into account when alarming for expiration of intermediate * is 20 / 40 days fine, see discussion @ #1683 * while you're at...

Making winshock more foolproof

10

Currently we're looking at * the four GCM ciphers. If there's no support * AND the HTTP header banner claims it's IIS/8.0 and IIS/8.5 * AND the server side doesn't...

... and call this from ``run_fs()``. Also for run_winshock() when not using a default run we can't tell which curves are available. Also for the sake of clean code it...

This is mostly a reminder. Everytime when I need to debug testssl.sh is see the while loop in the function over and over executed which maybe not as perfect. *...

display parts of STARTTLS handshake/banner

1

... in the header section

There's little information about what keys and values are in the output, what it means and how they are related to the screen output. In general that needs to be...

Add X-Http-Reason and various Sec-Fetch-* HTTP headers

1

Likely from tornado web server: https://github.com/tornadoweb/tornado/search?q=X-Http-Reason&unscoped_q=X-Http-Reason

bc I have little time to look into it right now 2 reminders: 1) ``` Start 2020-06-22 12:15:58 -->> 81.169.166.184:443 (drwetter.eu) > 81.169.166.184:443 (drwetter.eu) quoting at RHS

[feature] ESNI (Encrypted Server Name Indication)

3

... see https://datatracker.ietf.org/doc/draft-ietf-tls-esni/?include_text=1 (_1. Introduction DISCLAIMER: This is very early a work-in-progress design_) I haven't read it really and I can't tell whether it would be possible, one way or...