Johanna Amann
f99bc98800
for dh key exchanges, use p as the parameter for weak key exchanges.
...
Y can be a few bytes smaller due to the modulo operation - this is ok.
2014-11-17 09:51:47 -08:00
Johanna Amann
33053cca3a
Mark everything below 2048 bit as a weak key (Browsers will stop
...
accepting 1024 bits soon, so we can be of that opinion too).
Also - fix notice suppression. :/
2014-08-08 09:26:11 -07:00
Bernhard Amann
cb2eb0228b
last ssl fixes - missed three more.
...
This is the last one, I promise.
2014-05-21 11:24:47 -07:00
Robin Sommer
8d1b47fae6
Merge remote-tracking branch 'origin/topic/bernhard/ec-curve'
...
BIT-1189 #merged
* origin/topic/bernhard/ec-curve:
fix broxygen errors
Polish changes for ecdhe/dhe
Add DH support to SSL analyzer.
Add a few more ciphers Bro did not know at all so far.
Forgot a few ciphers in the EC list...
Log chosen curve when using ec cipher suite in TLS.
2014-05-01 20:52:50 -07:00
Bernhard Amann
7d0e5067c7
fix broxygen errors
2014-04-27 16:25:32 -07:00
Bernhard Amann
ef5b021e77
Polish changes for ecdhe/dhe
2014-04-27 00:15:49 -07:00
Bernhard Amann
fb56b22cff
Add DH support to SSL analyzer.
...
When using DHE or DH-Anon, sever key parameters are now available
in scriptland.
Also add script to alert on weak certificate keys or weak dh-params.
2014-04-26 23:52:51 -07:00
