lib/scanner/ssl.rb in yawast-0.6.0 vs lib/scanner/ssl.rb in yawast-0.7.0.beta1

- old
+ new

@@ -6,10 +6,15 @@ module Yawast module Scanner class Ssl def self.info(uri, check_ciphers, tdes_session_count) begin + puts + puts 'DEPRECATED: The Internal SSL Scanner (--internalssl) is deprecated and will not be updated.' + puts 'DEPRECATED: Use a tool such as testssl.sh or sslyze instead.' + puts + socket = TCPSocket.new(uri.host, uri.port) ctx = OpenSSL::SSL::SSLContext.new ctx.ciphers = OpenSSL::SSL::SSLContext::DEFAULT_PARAMS[:ciphers] @@ -87,10 +92,10 @@ if cert_chain.count == 1 #HACK: This is an ugly way to guess if it's a missing intermediate, or self-signed #It looks like a change to Ruby's OpenSSL wrapper is needed to actually fix this right. if cert.issuer == cert.subject - Yawast::Utilities.puts_vuln "\t\tCertificate Is Self-Singed" + Yawast::Utilities.puts_vuln "\t\tCertificate Is Self-Signed" else Yawast::Utilities.puts_warn "\t\tCertificate Chain Is Incomplete" end puts ''