lib/scanner/ssl.rb in yawast-0.6.0 vs lib/scanner/ssl.rb in yawast-0.7.0.beta1
- old
+ new
@@ -6,10 +6,15 @@
module Yawast
module Scanner
class Ssl
def self.info(uri, check_ciphers, tdes_session_count)
begin
+ puts
+ puts 'DEPRECATED: The Internal SSL Scanner (--internalssl) is deprecated and will not be updated.'
+ puts 'DEPRECATED: Use a tool such as testssl.sh or sslyze instead.'
+ puts
+
socket = TCPSocket.new(uri.host, uri.port)
ctx = OpenSSL::SSL::SSLContext.new
ctx.ciphers = OpenSSL::SSL::SSLContext::DEFAULT_PARAMS[:ciphers]
@@ -87,10 +92,10 @@
if cert_chain.count == 1
#HACK: This is an ugly way to guess if it's a missing intermediate, or self-signed
#It looks like a change to Ruby's OpenSSL wrapper is needed to actually fix this right.
if cert.issuer == cert.subject
- Yawast::Utilities.puts_vuln "\t\tCertificate Is Self-Singed"
+ Yawast::Utilities.puts_vuln "\t\tCertificate Is Self-Signed"
else
Yawast::Utilities.puts_warn "\t\tCertificate Chain Is Incomplete"
end
puts ''