« first day (2029 days earlier)      last day (3149 days later) » 

02:11
Any one know of software that would help me understand SSL/tls...something like a hackable mock implementation, which is easy to setup, and can get me started on learning concepts immediately...
 
4 hours later…
06:23
@deostroll github.com/trevp/tlslite is fairly nice
 
2 hours later…
08:30
@TerryChia thanks for sharing the link...
but this is a library...I want a mock implementation that is bare bones...
That is bare bones.
do I need to run a build process to get the docs directory?
09:03
Quick question in case anyone knows: is TLS 1.0 deprecated? And how can I test an SSL handshake using the 1.0 protocol? (Not sure if this is a valid question on the main site)
Seems like the recommendation is to disable TLS 1.0 though no actual vulnerabilities are known at this time:
6
Q: Should I disable TLS 1.0 on my servers?

augurarThe PCI Data Security Standard 3.1 recommends disabling "early TLS" along with SSL: SSL and early TLS are not considered strong cryptography and cannot be used as a security control after June 30, 2016. The Migrating from SSL and Early TLS supplement states: The best response is to disa...

09:25
I've managed to send a TLS 1.0 using SoapUI.
09:55
@Lilienthal What do you mean test a SSL handshake?
 
1 hour later…
10:59
@TerryChia I wanted to set-up a TLS Client Hello specifying Version: TLS 1.0 (0x0301)
I've managed to do so using SoapUI which defaults to 1.0.
@Lilienthal Ah. You can do that with just about any programming language, including Python.
 
1 hour later…
12:23
@TerryChia Hi. About that library. I installed it...and ran the tests, but it fails at one point - Test 26.b
someone said I've to provide the certificate to the server...how to do that?
 
2 hours later…
 
4 hours later…
17:59
any pentesters here that may help me out for a sec?
 
3 hours later…
20:38
@BobEbert I'm sure they can help you penetrate if you need :P

« first day (2029 days earlier)      last day (3149 days later) »