mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-01-03 23:39:45 +01:00
Merge branch 'master' of github.com:drwetter/testssl.sh
This commit is contained in:
commit
32ca73f982
@ -4,11 +4,11 @@ Instructions
|
|||||||
============
|
============
|
||||||
|
|
||||||
The precompiled binaries provided here have extended support for everything
|
The precompiled binaries provided here have extended support for everything
|
||||||
which is normally not configured to be compiled (56 Bit, some other
|
which is normally not configured to be compiled (56 Bit, export/ANOn ciphers, SSLv2 etc.)
|
||||||
old ciphers) and come with extended support for new cipher suites and/or
|
The bninraies come also with extended support for new cipher suites and/or
|
||||||
features which are not yet in the official branch.
|
features which are not yet in the official branch.
|
||||||
|
|
||||||
They are all compiled from an OpenSSL 1.0.2 fork
|
The binaries in this directory are all compiled from an OpenSSL 1.0.2 fork
|
||||||
from Peter Mosmans. He has patched the master git branch
|
from Peter Mosmans. He has patched the master git branch
|
||||||
to support CHACHA20 + POLY1305 and other ciphers (like CAMELIA 256 Bit).
|
to support CHACHA20 + POLY1305 and other ciphers (like CAMELIA 256 Bit).
|
||||||
|
|
||||||
@ -16,22 +16,23 @@ CHACHA20 + POLY1305 cipher suites from the official git repo didn't
|
|||||||
work for me work correctly, it's also likely they'll disappear shortly
|
work for me work correctly, it's also likely they'll disappear shortly
|
||||||
(https://www.mail-archive.com/openssl-dev@openssl.org/msg34756.html).
|
(https://www.mail-archive.com/openssl-dev@openssl.org/msg34756.html).
|
||||||
|
|
||||||
Pls note bug #38 (https://github.com/drwetter/testssl.sh/issues/38)
|
*Pls note bug [#38](https://github.com/drwetter/testssl.sh/issues/38) = bug [#6](https://github.com/PeterMosmans/openssl/issues/5): False negatives for 40Bit and export ciphers.*
|
||||||
|
|
||||||
|
Workaround: use the binaries from the vanilla tree, see https://github.com/drwetter/testssl.sh/openssl-bins/openssl-1.0.2-vanilla.
|
||||||
|
|
||||||
|
|
||||||
General
|
General
|
||||||
-------
|
-------
|
||||||
|
|
||||||
Both 64+32 bit versions were compiled under Ubuntu 12.04 LTS. Likely you cannot use older distributions, younger should work. I provide for each distributions two sets of binaries:
|
Both 64+32 bit versions were compiled under Ubuntu 12.04 LTS. Likely you cannot use older distributions, younger should work. I provide for each distributions two sets of binaries:
|
||||||
|
|
||||||
* statically linked binaries (except a few libs which are nowadays difficult to statically link)
|
* statically linked binaries
|
||||||
* dynamically linked binaries with MIT Kerberos support ("krb5" in the name)
|
* dynamically linked binaries with MIT Kerberos support ("krb5" in the name)
|
||||||
|
|
||||||
For the latter you need a whopping bunch of kerberos libraries which you maybe need to
|
For the latter you need a whopping bunch of kerberos libraries which you maybe need to
|
||||||
install from your distributor (libgssapi_krb5, libkrb5, libcom_err, libk5crypto, libkrb5support,
|
install from your distributor (libgssapi_krb5, libkrb5, libcom_err, libk5crypto, libkrb5support,
|
||||||
libkeyutils). For the 'static' binaries kerberos is not compiled in, so that's is not needed.
|
libkeyutils). For the 'static' binaries kerberos is not compiled in, so that's is not needed.
|
||||||
|
|
||||||
All binaries are signed with my gpg key (.asc files).
|
|
||||||
|
|
||||||
|
|
||||||
Compilation instructions
|
Compilation instructions
|
||||||
------------------------
|
------------------------
|
||||||
|
Loading…
Reference in New Issue
Block a user