Konstantin Weddige

Results 17 issues of Konstantin Weddige

The option to validate and import scan results with pydantic/SslyzeOutputAsJson is great. However it requires all the dependencies of sslyze, including nassl. This is a problem, if I'm on a...

**Describe the bug** The lines 187-201 in `_robot_tester.py` (https://github.com/nabla-c0d3/sslyze/blob/release/sslyze/plugins/robot/_robot_tester.py#L186) are never executed and lead to false negatives when scanning servers for the ROBOT vulnerability. **To Reproduce** At the moment, I...

need more info

ETSI recently published the TLS 1.3 flavour eTLS: https://www.etsi.org/deliver/etsi_ts/103500_103599/10352303/01.01.01_60/ts_10352303v010101p.pdf As eTLS compromises the DH key exchange it would be nice, if sslyze could report if a server supports eTLS. There...

enhancement

When can we expect the current master to be released on PyPI? #120 (and #129 which fixes the same problem again) are not there yet and therefore it's still not...

This change fixes issues with non-english windows installations. `schtasks` uses localized collumn names and `TaskName`, `Run As User`, `Task to Run` do not always exist.

Without this change, JAWS reports wrong results on non-English systems.

Not every exception must be caught.

This PR adds the language of the document to the catalog, if `` is set. ![image](https://user-images.githubusercontent.com/1119426/180394484-9777941a-93e2-400b-9b02-e9cf64c99c53.png)

I have a document, where I list multiple authors in the meta tags: ```html ``` In the default configuration, they are added as a single string (`/Author (Ben Tester, Max...

Is there any chance, that we will see mypy support? I saw you startet at https://github.com/XML-Security/signxml/tree/mypy and it seems, that there isn't too much to do: ``` (.env38) signxml [develop...