Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
testssl.sh/etc
History
Niko78 e233480ca2 Update README.md 2016-03-25 09:20:20 +01:00
..
Apple.pem - added Apple certificate store 2016-03-24 18:52:10 +01:00
Linux.pem - now the stores are properly named 2016-03-24 18:56:26 +01:00
Microsoft.pem - now the stores are properly named 2016-03-24 18:56:26 +01:00
Mozilla.pem - now the stores are properly named 2016-03-24 18:56:26 +01:00
README.md Update README.md 2016-03-25 09:20:20 +01:00
curves.txt checkin (for future work) 2016-02-06 15:42:55 +01:00
mapping-rfc.txt Fix typo in etc/mapping-rfc.txt 2016-02-05 14:53:19 -05:00

README.md

Certificate stores

The certificate stores were retrieved by

  • Mozilla; see https://curl.haxx.se/docs/caextract.html
  • Linux: Just copied from an up-to-date Linux machine
  • Microsoft: under Windows >= 7,2008 MS decided not to provide a full certificate store by default/via update as all other OS do. It's being populated with time -- supposed you use e.g. IE while browsing. This store was destilled from three different windows installations via certmgr.msc and is an export of "Trusted Root Certification Authorities"
    --> "Certificates". Third Party Root Certificates were for now deliberately omitted. Feedback is welcome, see #317.
  • Apple.pem : it comes from Apple OS X keychain app Open Keychain Access. In the Finder window, under Favorites, click Applications, click Utilities and then double-click Keychain Access. In the Keychain Access window, under Keychains, click System and then under Category, click All Items. Select now all CA certificate then File, Export Items

In this directory you can also save e.g. your company Root CA(s) in PEM format, extension pem. This has two catches momentarily: You will still get a warning for the other certificate storesthough while scanning internal networks. If you scan other hosts in the internet the check against your Root CA will fail, too. This will be fixed in the future, see #230.

Mapping files

The file mapping-rfc.txt uses the hexcode to map OpenSSL names against the RFC/IANA names. curves.txt is not being used yet, it is supposed to map EC curve names properly.