cisagov / cisagov/pshtt

Outputs should include the values when HTTPS {Bad Chain, Bad Hostname, Expired Cert} are TRUE

Open
#14 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
693
Forks
91
PR merge metrics
No merged PRs in 30d

Description

The first question to be asked when HTTPS {Bad Chain, Bad Hostname, Expired Cert} is TRUE will be "What's the value that the scanner saw?" `pshtt` CSV/JSON outputs should include three additional fields (which should be blank when the corresponding field is FALSE).

Presuming we stick with `sslyze`:
- `HTTPS Bad Chain Value`: return the value for "Certificate Chain Received"
- `HTTPS Bad Hostname Value`: return the value for "Hostname Validation"
- `HTTPS Expired Certificate Value`: return value for "Not After"

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.