oss-sec mailing list archives

Re: TLS testing results - OS distro vulnerabilities


From: Jani Kenttala <jkenttal () ee oulu fi>
Date: Mon, 22 Aug 2016 15:58:02 +0300

On Mon, Aug 22, 2016 at 02:19:11PM +0300, Solar Designer wrote:
On Mon, Aug 22, 2016 at 10:46:24AM +0200, Jakub Wilk wrote:
* Mauri Miettinen <Mauri.Miettinen () student oulu fi>, 2016-08-20, 16:50:
-snip-
Results are available from:

https://github.com/ouspg/trytls/blob/shootout-0.3/shootout/README.md

How did you manage to run tests against Debian 7 (wheezy)? Your setup.py 
requires Python 2.7.9 or 3.4.0, but wheezy has only 2.7.3/3.2.3.

I think Mauri isn't subscribed - CC'ing.

Alexander

Hi!

We used self-compiled python to run the tests against the older python bundled with the OS 
(see Dockerfile at https://github.com/ouspg/trytls/blob/shootout-0.3/shootout/debian-7/Dockerfile).

To elaborate a bit, we are actually looking two different set of requirements.

1) TryTLS runner itself requires 2.7.9 or 3.4.0
2) However, it can call older python version (or what ever command) when executing the tests.

That being said, python2-urllib2 did not execute cleanly with 2.7.3. 
There is a pull request about that <https://github.com/ouspg/trytls/pull/237>, 
and the corresponding result has been marked as N/A in the summary table.

-- 
-Jani


Current thread: