Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

typos, clarification

This commit is contained in:
Dirk Wetter 2016-03-13 21:10:00 +01:00
parent 7f28b17b3c
commit 682ea066d6
1 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
etc/README.md
View File

@ -4,21 +4,21 @@
The certificate stores were retrieved by The certificate stores were retrieved by
* Mozilla; see https://curl.haxx.se/docs/caextract.html * Mozilla; see https://curl.haxx.se/docs/caextract.html
* Linux: Just copied from a uptodate Linux machine * Linux: Just copied from a up-to-date Linux machine
* Microsoft: under Windows >= 7,2008 MS decided not to provide * Microsoft: under Windows >= 7,2008 MS decided not to provide
a full certificate store. It's being populated with time -- a full certificate store bu default/via update as other OS.
supposed you use e.g. IE while browsing. This store was destilled It's being populated with time -- supposed you use e.g. IE while browsing.
from three different windows installations via certmgr.msc and This store was destilled from three different windows installations via
export of "Trusted Root Certification Authorities" --> "Certificates". certmgr.msc and is an export of "Trusted Root Certification Authorities"
Third Party Root Certificates were deliberately omitted. --> "Certificates". Third Party Root Certificates were for now deliberately
omitted. Feedback is welcome, see #317.
In this directory you can also save e.g. your company Root CAs in PEM In this directory you can also save e.g. your company Root CA(s) in PEM
format. You will still get a warning for the other certificate stores format, extension ``pem``. This has two catches momentarily: You will still
though while scanning internal networks. If you scan other hosts in the get a warning for the other certificate storesthough while scanning internal
internet the check against your Root CA will fail, too. This will be networks. If you scan other hosts in the internet the check against your
fixed in the future, see #230. Root CA will fail, too. This will be fixed in the future, see #230.
#### Mapping file #### Mapping file
The file mapping-rfc.txt uses the hexcode to map OpenSSL names The file mapping-rfc.txt uses the hexcode to map OpenSSL names
against the RFC/IAMA names against the RFC/IANA names