Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Switch to cryptography for x509 chain validation #638

Closed
nabla-c0d3 opened this issue Jan 27, 2024 · 1 comment
Closed

Switch to cryptography for x509 chain validation #638

nabla-c0d3 opened this issue Jan 27, 2024 · 1 comment
Labels
fix ready

Comments

@nabla-c0d3
Copy link
Owner

See https://blog.trailofbits.com/2024/01/25/we-build-x-509-chains-so-you-dont-have-to/
Consider removing the dependency to pyOpenSSL.
@nabla-c0d3 nabla-c0d3 moved this to Todo in SSLyze 6.0.0 Jan 27, 2024
@nabla-c0d3 nabla-c0d3 mentioned this issue Jan 27, 2024
Closed
@nabla-c0d3 nabla-c0d3 moved this from Todo to In Progress in SSLyze 6.0.0 Feb 24, 2024
nabla-c0d3 added a commit that referenced this issue Feb 24, 2024
@nabla-c0d3
[#627][#638] Swith to cryptography's cert validation function
351ca80
@nabla-c0d3 nabla-c0d3 moved this from In Progress to Done in SSLyze 6.0.0 Feb 24, 2024
@nabla-c0d3 nabla-c0d3 mentioned this issue Feb 24, 2024
Closed
chigby added a commit to freedomofpress/fpf-misc-resources that referenced this issue Mar 11, 2024
@chigby
Ignore vulnerabilities related to pending sslyze update
ded783a 
See related Github posts:

* nabla-c0d3/sslyze#638
* nabla-c0d3/sslyze#641 (comment)
@chigby chigby mentioned this issue Mar 11, 2024
Merged
@nabla-c0d3
Copy link
Owner Author

Fixed in v6.0.0.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
fix ready
Projects
No open projects
SSLyze 6.0.0
Status: Done
Milestone
No milestone
Development

No branches or pull requests
1 participant
@nabla-c0d3