|
53 | 53 | }, |
54 | 54 | "http_headers": { |
55 | 55 | "$ref": "#/$defs/HttpHeadersScanAttemptAsJson" |
| 56 | + }, |
| 57 | + "tls_extended_master_secret": { |
| 58 | + "$ref": "#/$defs/EmsExtensionScanResultAsJson" |
56 | 59 | } |
57 | 60 | }, |
58 | 61 | "required": [ |
|
72 | 75 | "session_renegotiation", |
73 | 76 | "session_resumption", |
74 | 77 | "elliptic_curves", |
75 | | - "http_headers" |
| 78 | + "http_headers", |
| 79 | + "tls_extended_master_secret" |
76 | 80 | ], |
77 | 81 | "title": "AllScanCommandsAttemptsAsJson", |
78 | 82 | "type": "object" |
|
368 | 372 | "title": "EarlyDataScanResultAsJson", |
369 | 373 | "type": "object" |
370 | 374 | }, |
| 375 | + "EmsExtensionScanResultAsJson": { |
| 376 | + "additionalProperties": false, |
| 377 | + "properties": { |
| 378 | + "supports_ems_extension": { |
| 379 | + "title": "Supports Ems Extension", |
| 380 | + "type": "boolean" |
| 381 | + } |
| 382 | + }, |
| 383 | + "required": [ |
| 384 | + "supports_ems_extension" |
| 385 | + ], |
| 386 | + "title": "EmsExtensionScanResultAsJson", |
| 387 | + "type": "object" |
| 388 | + }, |
371 | 389 | "FallbackScsvScanAttemptAsJson": { |
372 | 390 | "additionalProperties": false, |
373 | 391 | "properties": { |
|
913 | 931 | "is_vulnerable_to_client_renegotiation_dos": { |
914 | 932 | "title": "Is Vulnerable To Client Renegotiation Dos", |
915 | 933 | "type": "boolean" |
| 934 | + }, |
| 935 | + "client_renegotiations_success_count": { |
| 936 | + "title": "Client Renegotiations Success Count", |
| 937 | + "type": "integer" |
916 | 938 | } |
917 | 939 | }, |
918 | 940 | "required": [ |
919 | 941 | "supports_secure_renegotiation", |
920 | | - "is_vulnerable_to_client_renegotiation_dos" |
| 942 | + "is_vulnerable_to_client_renegotiation_dos", |
| 943 | + "client_renegotiations_success_count" |
921 | 944 | ], |
922 | 945 | "title": "SessionRenegotiationScanResultAsJson", |
923 | 946 | "type": "object" |
|
1850 | 1873 | }, |
1851 | 1874 | "_ServerNetworkConfigurationAsJson": { |
1852 | 1875 | "additionalProperties": false, |
1853 | | - "description": "Additional network settings to provide fine-grained control on how to connect to a specific server.\n\nAttributes:\n tls_server_name_indication: The hostname to set within the Server Name Indication TLS extension.\n tls_wrapped_protocol: The protocol wrapped in TLS that the server expects. It allows SSLyze to figure out\n how to establish a (Start)TLS connection to the server and what kind of \"hello\" message\n (SMTP, XMPP, etc.) to send to the server after the handshake was completed. If not supplied, standard\n TLS will be used.\n tls_client_auth_credentials: The client certificate and private key needed to perform mutual authentication\n with the server. If not supplied, SSLyze will attempt to connect to the server without performing\n client authentication.\n xmpp_to_hostname: The hostname to set within the `to` attribute of the XMPP stream. If not supplied, the\n server's hostname will be used. Should only be set if the supplied `tls_wrapped_protocol` is an\n XMPP protocol.\n network_timeout: The timeout (in seconds) to be used when attempting to establish a connection to the\n server.\n network_max_retries: The number of retries SSLyze will perform when attempting to establish a connection\n to the server.", |
| 1876 | + "description": "Additional network settings to provide fine-grained control on how to connect to a specific server.\n\nAttributes:\n tls_server_name_indication: The hostname to set within the Server Name Indication TLS extension.\n tls_opportunistic_encryption: The protocol wrapped in TLS that the server expects. It allows SSLyze to figure out\n how to establish a (Start)TLS connection to the server and what kind of \"hello\" message\n (SMTP, XMPP, etc.) to send to the server after the handshake was completed. If not supplied, standard\n TLS will be used.\n tls_client_auth_credentials: The client certificate and private key needed to perform mutual authentication\n with the server. If not supplied, SSLyze will attempt to connect to the server without performing\n client authentication.\n xmpp_to_hostname: The hostname to set within the `to` attribute of the XMPP stream. If not supplied, the\n server's hostname will be used. Should only be set if the supplied `tls_opportunistic_encryption` is an\n XMPP protocol.\n http_user_agent: The User-Agent to send in HTTP requests. If not supplied, a default Chrome-like\n is used that includes SSLyze's version.\n smtp_ehlo_hostname: The hostname to set in the SMTP EHLO. If not supplied, the default of \"sslyze.scan\"\n will be used. Should only be set if the supplied `tls_opportunistic_encryption` is SMTP.\n network_timeout: The timeout (in seconds) to be used when attempting to establish a connection to the\n server.\n network_max_retries: The number of retries SSLyze will perform when attempting to establish a connection\n to the server.", |
1854 | 1877 | "properties": { |
1855 | 1878 | "tls_server_name_indication": { |
1856 | 1879 | "title": "Tls Server Name Indication", |
|
2127 | 2150 | "type": "string" |
2128 | 2151 | }, |
2129 | 2152 | "sslyze_version": { |
2130 | | - "default": "6.0.0", |
| 2153 | + "default": "6.1.0", |
2131 | 2154 | "title": "Sslyze Version", |
2132 | 2155 | "type": "string" |
2133 | 2156 | }, |
|
0 commit comments