nabla-c0d3

#!/usr/bin/env python
# -*- coding: utf-8 -*-
from __future__ import absolute_import
from __future__ import unicode_literals


from sslyze.concurrent_scanner import ConcurrentScanner, PluginRaisedExceptionScanResult
from sslyze.plugins.utils.certificate_utils import CertificateUtils
from sslyze.plugins.certificate_info_plugin import CertificateInfoScanCommand
from sslyze.plugins.session_renegotiation_plugin import SessionRenegotiationScanCommand

nabla-c0d3

Client-side SSL

For excessively paranoid client authentication.

Using self-signed certificate.

Create a Certificate Authority root (which represents this server)

Organization & Common Name: Some human identifier for this server CA.

openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt

nabla-c0d3

# With SSLyze 1.4.0, the code that performs connectivity testing with a server needs to be slightly changed:

# SSLyze before 1.4.0
try: 
    server_info = ServerConnectivityInfo(
      hostname='smtp.gmail.com',
      port=587, 
      tls_wrapped_protocol=TlsWrappedProtocolEnum.STARTTLS_SMTP
    ) 
    server_info.test_connectivity_to_server() 

nabla-c0d3

nabla-c0d3

import tweepy
from datetime import datetime, timedelta

consumer_key = ''
consumer_secret = ''
access_token = ''
access_secret = ''

auth = tweepy.OAuthHandler(consumer_key, consumer_secret)
auth.set_access_token(access_token, access_secret)

nabla-c0d3

import time

from invoke import task, Context

CMD_COMPOSE = "docker-compose -f docker-compose.dev.yml"
CMD_RUN_APP = f"{CMD_COMPOSE} run --rm app"


@task
def build(ctx):