Contents

module Ciphersurfer
  class Scanner
    
    attr_reader :ok_ciphers, :ko_ciphers

    def initialize(options={})
      @host=options[:host]
      @port=options[:port] ||= 443
      @proto=options[:proto]
      @ok_ciphers=[]
      @ko_ciphers=[]
    end

    def self.alive?(host, port)
      request = Net::HTTP.new(host, port)
      request.use_ssl = true
      request.verify_mode = OpenSSL::SSL::VERIFY_NONE
      begin
        response = request.get("/")
        return true
      rescue Errno::ECONNREFUSED => e
        return false
      rescue OpenSSL::SSL::SSLError => e
        return false
      end
    end
    def go
      cipher_set = OpenSSL::SSL::SSLContext.new(@proto).ciphers
      cipher_set.each do |cipher_name, cipher_version, bits, algorithm_bits|
        request = Net::HTTP.new(@host, @port)
        request.use_ssl = true
        request.set_context = @proto
        request.verify_mode = OpenSSL::SSL::VERIFY_NONE
        request.ciphers = cipher_name
        begin
          response = request.get("/")
          @ok_ciphers << {:bits=>bits, :name=>cipher_name}
        rescue OpenSSL::SSL::SSLError => e
          @ko_ciphers << {:bits=>bits, :name=>cipher_name}
        rescue 
          # Quietly discard all other errors... you must perform all error chekcs in the calling program
        end
      end
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
ciphersurfer-0.50.0	lib/ciphersurfer/scanner.rb