Merge branch 'master' of github.com:drwetter/testssl.sh

This commit is contained in:
Dirk Wetter 2015-09-03 13:26:42 +02:00
commit 02800c78d9
1 changed files with 15 additions and 14 deletions

View File

@ -4,25 +4,26 @@ Binaries
The binaries here have the naming scheme ``openssl.$(uname).$(uname -m)`` The binaries here have the naming scheme ``openssl.$(uname).$(uname -m)``
and will be picked up from testssl.sh if you run testssl.sh directly and will be picked up from testssl.sh if you run testssl.sh directly
off the git directory. off the git directory. Otherwise you need ``testssl.sh`` to point to it
via the argument (``--openssl=<here>``) or as an environment variable
If you expect Kerberos ciphers: The Linux binaries with the trailing -krb5
need to be renamed accordingly or you need to supply the path either
as an argument (``--openssl=<here>``) or as an environment variable
(``OPENSSL=<here> testssl.sh <yourargs>``). (``OPENSSL=<here> testssl.sh <yourargs>``).
The precompiled binaries provided here have extended support for The Linux binaries with the trailing ``-krb5`` come with Kerberos 5 support,
they won't be automatically picked up as you need to make sure first they
run (see libraries below).
All the precompiled binaries provided here have extended support for
everything which is normally not in OpenSSL or LibreSSL -- 40+56 Bit, everything which is normally not in OpenSSL or LibreSSL -- 40+56 Bit,
export/ANON ciphers, weak DH ciphers, SSLv2 etc. -- all the dirty export/ANON ciphers, weak DH ciphers, SSLv2 etc. -- all the dirty
features needed for testing. OTOH the binaries also come with extended features needed for testing. OTOH they also come with extended support
support for new / advanced cipher suites and/or features which are not for new / advanced cipher suites and/or features which are not in the
in the official branch like CHACHA20+POLY1305 and other ciphers like official branch like CHACHA20+POLY1305 and CAMELIA 256 bit ciphers.
CAMELIA 256 Bit.
The binaries in this directory are all compiled from an OpenSSL 1.0.2 fork The binariesi tn this directory are all compiled from an OpenSSL 1.0.2 fork
from Peter Mosmans. Thx a bunch, Peter! from Peter Mosmans (https://github.com/PeterMosmans/openssl). Thx a bunch,
Peter!
Linux binaries so far come from Dirk, other contributors see ../CREDITS.md . Compiled Linux binaries so far come from Dirk, other contributors see ../CREDITS.md .
Compiling and Usage Instructions Compiling and Usage Instructions
@ -98,7 +99,7 @@ If you don't have / don't want Kerberos libraries and devel rpms/debs, just omit
5.) make report (check whether it runs ok!) 5.) make report (check whether it runs ok!)
6.) "./apps/openssl ciphers -V 'ALL:COMPLEMENTOFALL' | wc -l" lists now for me 6.) ``./apps/openssl ciphers -V 'ALL:COMPLEMENTOFALL' | wc -l`` lists for me
* 191(+4 GOST) ciphers -- including kerberos * 191(+4 GOST) ciphers -- including kerberos
* 177(+4 GOST) ciphers without kerberos * 177(+4 GOST) ciphers without kerberos