Turn off TLSv1 warning in intermediate and above
pancho-villa opened this issue · 1 comments
Hello,
As of June 30th TLSv1 is no longer supported for companies that have to adhere to PCI compliance:
https://blog.pcisecuritystandards.org/migrating-from-ssl-and-early-tls
I was wondering if we can remove the warning for not supporting TLSv1. Or perhaps maybe implement a kind of ignore flag array we can pass in to the command line analyze to skip unnecessary warnings. I'm using this on a domain like this:
`$ python3 analyze.py -l intermediate -t https://www.mydomain.com --nagios
www.mydomain.com:443 has obscure or unknown ssl/tls
and DOES NOT comply with the 'intermediate' level
Changes needed to match the intermediate level:
- consider enabling TLSv1`
I have rundeck set to run this task daily but it's currently disabled since this is considered an error. I'd be happy to work on the PR but I thought I'd ask first to see what the best option would be.
analyze is performing the check against Server Side TLS, so it needs to be removed there before it will get removed here