Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

typos, clarification

This commit is contained in:
Dirk Wetter 2016-03-13 21:10:00 +01:00
parent 7f28b17b3c
commit 682ea066d6
1 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
etc/README.md
View File

@ -4,21 +4,21 @@
The certificate stores were retrieved by
* Mozilla; see https://curl.haxx.se/docs/caextract.html
* Linux: Just copied from a uptodate Linux machine
* Linux: Just copied from a up-to-date Linux machine
* Microsoft: under Windows >= 7,2008 MS decided not to provide
a full certificate store. It's being populated with time --
supposed you use e.g. IE while browsing. This store was destilled
from three different windows installations via certmgr.msc and
export of "Trusted Root Certification Authorities" --> "Certificates".
Third Party Root Certificates were deliberately omitted.
a full certificate store bu default/via update as other OS.
It's being populated with time -- supposed you use e.g. IE while browsing.
This store was destilled from three different windows installations via
certmgr.msc and is an export of "Trusted Root Certification Authorities"
--> "Certificates". Third Party Root Certificates were for now deliberately
omitted. Feedback is welcome, see #317.
In this directory you can also save e.g. your company Root CAs in PEM
format. You will still get a warning for the other certificate stores
though while scanning internal networks. If you scan other hosts in the
internet the check against your Root CA will fail, too. This will be
fixed in the future, see #230.
In this directory you can also save e.g. your company Root CA(s) in PEM
format, extension ``pem``. This has two catches momentarily: You will still
get a warning for the other certificate storesthough while scanning internal
networks. If you scan other hosts in the internet the check against your
Root CA will fail, too. This will be fixed in the future, see #230.
#### Mapping file
The file mapping-rfc.txt uses the hexcode to map OpenSSL names
against the RFC/IAMA names
against the RFC/IANA names