Skip to content

Commit

Permalink
verify server side ordering is used in analyze.py
Browse files Browse the repository at this point in the history
  • Loading branch information
jvehent committed Oct 11, 2014
1 parent 1c9d52c commit 0da92f2
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions analyze.py
Original file line number Diff line number Diff line change
Expand Up @@ -114,6 +114,8 @@ def is_old(results):
old = False
if not has_ocsp:
failures[lvl].append("consider enabling OCSP Stapling")
if results['serverside'] != 'True':
failures[lvl].append("enforce server side ordering")
return old

# is_intermediate is similar to is_old but for intermediate configuration from
Expand Down Expand Up @@ -174,6 +176,8 @@ def is_intermediate(results):
inter = False
if not has_ocsp:
failures[lvl].append("consider enabling OCSP Stapling")
if results['serverside'] != 'True':
failures[lvl].append("enforce server side ordering")
return inter

# is_modern is similar to is_old but for modern configuration from
Expand Down Expand Up @@ -221,6 +225,8 @@ def is_modern(results):
modern = False
if not has_ocsp:
failures[lvl].append("consider enabling OCSP Stapling")
if results['serverside'] != 'True':
failures[lvl].append("enforce server side ordering")
return modern

def is_ordered(results, ref_ciphersuite, lvl):
Expand Down

0 comments on commit 0da92f2

Please sign in to comment.