0.2.0

Features

• TLS (tls)
  • Diffie-Hellman (dhparams)
    • check whether the server uses safe prime as DH parameter to avoid small subgroup confinement attack
    • check whether server uses well-known (RFC defined) DH parameter
    • check whether server reuse the DH parameter
  • FTP opportunistic TLS (STARTTLS) support

Notable Fixes

• TLS (tls)
  • Cipher Suites (ciphers)
    • handle server long cipher suite list intolerance
    • fix cipher suite preference order calculation
  • Elliptic Curves (curves)
    • fix result when server does not support named group extension
  • Public Keys (pubkeys)
    • handle cross signed key in the certificate chain
    • fixed JSON output in case of expired certificates
    • handle the case when only a self-singed CA is served as certificate
    • handle the case when CA with no basic constraint is served
  • handle rarely/incorrectly used TLS alerts
  • handle when there is no response from server
  • handle scheme other than tls in URL argument of the command line tool
  • handle plain text response to TLS handshake initiation
  • add default port for opportunistic TLS schemes
  • uniform timeout handling in TLS clients

Other

• improve unit tests (100% code coverage)
• Docker support and ready-to-use container on DockerHub
  (coroner/cryprolyzer)
• build packages to several Linux distributions on Open Build Service
  • Debian (10, Testing)
  • Raspbian (10)
  • Ubuntu (19.10)
  • Fedora (29, 30, 31, Rawhide)
  • Mageia (7, Cauldron)
• IP address can be set to hostname in command line (#10)
• fix several Python packaging issues