Re: [W3af-develop] audit.sslCertificate improvements

2012-05-18 Thread Achim Hoffmann
Am 17.05.2012 20:21, schrieb Taras: > > [0] http://code.google.com/p/sslyze/ hmm, take care. When I last tested sslyze.py mail.google.com it does not report that mail.google.com allows following ciphers: ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA, ECDHE-RSA-DES-CBC3-SHA, ECDHE-RSA-RC4-SHA ju

Re: [W3af-develop] audit.sslCertificate improvements

2012-05-18 Thread Andres Riancho
Taras, On Thu, May 17, 2012 at 3:21 PM, Taras wrote: > Andres, > > > >>> I plan to add a few small checks and improvements into >>> audit.sslCertificate plugin. Among them: >>> >>> * support of DNS alt names >>> * checking for *soon* expired certificates >> >> >> I like the second point very much