You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
3822 lines
162 KiB
3822 lines
162 KiB
5 years ago
|
[
|
||
|
|
{
|
||
|
|
"id" : "service",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "HTTP"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSLv2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSLv3",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_3",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not offered and downgraded to a weaker protocol"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "NPN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "offered with h2, http/1.1 (advertised)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ALPN_HTTP2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "h2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ALPN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http/1.1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_NULL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_aNULL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_EXPORT",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_LOW",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_3DES_IDEA",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_AVERAGE",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_STRONG",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS_ciphers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS_ECDHE_curves",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "prime256v1 secp384r1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_order",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "server"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "protocol_negotiated",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "Default protocol TLS1.2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_negotiated",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherorder_TLSv1_1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherorder_TLSv1_2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_extensions",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_session_ticket",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "valid for 10800 seconds only (<daily)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSL_sessionID_support",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "yes"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "sessionresumption_ticket",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "sessionresumption_ID",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_timestamp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "random"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_numbers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_signatureAlgorithm",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "SHA256 with RSA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_keySize",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "2048 bits"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_keyUsage",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Digital Signature, Key Encipherment"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_extKeyUsage",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "cert_ext_keyusage"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_serialNumber",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "02F71A9BDE122BE31B205369489BA219"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_fingerprintSHA1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "94F1FDFF2B9A4C8EB3840E5054D0DC335E395DEC"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_fingerprintSHA256",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "-----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIQAvcam94SK+MbIFNpSJuiGTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MjEwMDAwMDBaFw0xOTA5MjEx MjAwMDBaMBsxGTAXBgNVBAMTEGNyYW4ucnN0dWRpby5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDYI7Fw82LOcVEPq9sh73uV2g1w5ncIiJxYF9F6 RfUcZS2DG/OSL6MtwB2WdaL4Oq4tPxAfn+nrPZKpwh4w9tb30iZsEvyaYJsQMy4h Hs2USDMLEuYlAquuRD5+aVRWetGdEzaIJEqRwIJab65ZaynuAjm2dzksyXC1BRud pFYp9Mxt06zST6qLSgVkHv3N39WBQJJHwnsyAsc878Ft0Z15r1fytM4F0B/FEBm2 msm8IHx3mAusY8kG+wf2k4tUx3630IsxfgnmhWRW4ngdh4dewQpQT5Jn3cBHnb4f ZGIVWpdXocidozCjA0trR2mpMsAd0k0oX6MOsG34V1zdFjkLAgMBAAGjggKiMIIC njAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUUKwy KZ005KuobE+g58lfgtQlWegwQgYDVR0RBDswOYIQY3Jhbi5yc3R1ZGlvLmNvbYIQ Y3Jhbi5yc3R1ZGlvLm9yZ4ITY2xvdWQuci1wcm9qZWN0Lm9yZzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw MKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy bDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFlXStlrwAABAMA RzBFAiEAuZ1Xyc+IaB00HCBXuONAf7zsZ90DO6BEn9NL/0tyUaMCIHpYW5CKdT2S SrWQfqIupIcatYjWTUwaJWj6ubwKxE21AHUAh3W/51l8+IxDmV+9827/Vo1HVjb/ SrVgwbTq/16ggw8AAAFlXStlqQAABAMARjBEAiA7simJMeZRSjoxjIbQJrScyOyA B5E8bKnRHiQoZT4CSAIgOiq2YnM+JbBZnRaSdUwGEumHxiKjaFGYu0HhQO9e2fUw DQYJKoZIhvcNAQELBQADggEBAF0lExjl14FEG0CY4Qv0i9DQxdzyqaE38nVX85dC 6lzFmB/sqU1B3OSHDsrQg4E2KkHRhq6hwj6RKKzn/RROai9oa7zik1V94SyOn1aG aepFBX+12rv2vNZUi9qE8vqtRxWfvfHjW2oTltv6XTFrcNwDdKkIrh403MtliALH tlMH0PaeVvhcTcvdHzTj9L4asH3u54breSgvHYETMnuUyQlsaxHXFcgw1SFDlhpR qnLArkqHFnAVAiPMyjlRqN7Scdb9QBwDH+szcN+DqsF+hA+c7OuCmaetcCxNVljz RzNS664x6pk1RV71FIR5C2CgtnLKbCbltr3ocAR6vNM0kk0= -----END CERTIFICATE-----"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_commonName",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "cran.rstudio.com"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_commonName_wo_SNI",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "request w/o SNI didn't succeed"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_subjectAltName",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "cran.rstudio.com cran.rstudio.org cloud.r-project.org"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_caIssuers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Amazon (Amazon from US)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_trust",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "Ok via SAN (SNI mandatory)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_chain_of_trust",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "passed."
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_certificatePolicies_EV",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "no"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_eTLS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not present"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_expiration_status",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "201 >= 60 days"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_notBefore",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "2018-08-20 20:00"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_notAfter",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "2019-09-21 08:00"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certs_countServer",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "4"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certs_list_ordering_problem",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "no"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_crlDistributionPoints",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_ocspURL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http://ocsp.sca1b.amazontrust.com"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "OCSP_stapling",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_mustStapleExtension",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DNS_CAArecord",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certificate_transparency",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "yes (certificate extension)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HTTP_status_code",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "200 OK ('/')"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HTTP_clock_skew",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "-509920 seconds from localtime"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HSTS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HPKP",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No support for HTTP Public Key Pinning"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_server",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Apache/2.4.33 (Unix)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_application",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No application banner found"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cookie_count",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "0 at '/'"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "security_headers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "MEDIUM",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_reverseproxy",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"cwe" : "CWE-200",
|
||
|
|
"finding" : "X-Cache: Hit from cloudfrontVia: 1.1 d644e7f3f959c262b5d8dffe5d3078b8.cloudfront.net (CloudFront)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "heartbleed",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-0160",
|
||
|
|
"cwe" : "CWE-119",
|
||
|
|
"finding" : "not vulnerable, no heartbeat extension"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "CCS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-0224",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ticketbleed",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-9244",
|
||
|
|
"cwe" : "CWE-200",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ROBOT",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
|
||
|
|
"cwe" : "CWE-203",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "secure_renego",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2009-3555",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "secure_client_renego",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2009-3555",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "CRIME_TLS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2012-4929",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "BREACH",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2013-3587",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable, no HTTP compression - only supplied '/' tested"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "POODLE_SSL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-3566",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "fallback_SCSV",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SWEET32",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-2183 CVE-2016-6329",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "FREAK",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-0204",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DROWN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable to DROWN on this host and port"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DROWN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LOGJAM",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-4000",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable, no DH EXPORT ciphers,"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LOGJAM-common_primes",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-4000",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "no DH key with <= TLS 1.2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "BEAST",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2011-3389",
|
||
|
|
"cwe" : "CWE-20",
|
||
|
|
"finding" : "not vulnerable, no SSL3 or TLS1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LUCKY13",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"cve" : "CVE-2013-0169",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "potentially vulnerable, uses TLS CBC ciphers"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "RC4",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2013-2566 CVE-2015-2808",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc030",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc028",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc014",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x9d",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x35",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc02f",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc027",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc013",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x9c",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x3c",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x2f",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_422",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_442",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_500",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_60",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_70",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-chrome_65_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-chrome_70_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-firefox_59_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-firefox_62_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_6_xp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_7_vista",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_8_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_8_xp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win81",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_winphone81",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_13_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_13_winphone10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_15_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-opera_17_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_9_ios9",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_9_osx1011",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_10_osx1012",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-apple_ats_9_ios9",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-tor_1709_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_6u45",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_7u25",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_8u161",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_904",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-openssl_101l",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-openssl_102e",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.116",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "service",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "HTTP"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSLv2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSLv3",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_3",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not offered and downgraded to a weaker protocol"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "NPN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "offered with h2, http/1.1 (advertised)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ALPN_HTTP2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "h2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ALPN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http/1.1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_NULL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_aNULL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_EXPORT",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_LOW",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_3DES_IDEA",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_AVERAGE",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_STRONG",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS_ciphers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS_ECDHE_curves",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "prime256v1 secp384r1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_order",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "server"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "protocol_negotiated",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "Default protocol TLS1.2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_negotiated",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherorder_TLSv1_1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherorder_TLSv1_2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_extensions",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_session_ticket",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "valid for 10800 seconds only (<daily)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSL_sessionID_support",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "yes"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "sessionresumption_ticket",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "sessionresumption_ID",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_timestamp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "random"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_numbers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_signatureAlgorithm",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "SHA256 with RSA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_keySize",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "2048 bits"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_keyUsage",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Digital Signature, Key Encipherment"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_extKeyUsage",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "cert_ext_keyusage"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_serialNumber",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "02F71A9BDE122BE31B205369489BA219"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_fingerprintSHA1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "94F1FDFF2B9A4C8EB3840E5054D0DC335E395DEC"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_fingerprintSHA256",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "-----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIQAvcam94SK+MbIFNpSJuiGTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MjEwMDAwMDBaFw0xOTA5MjEx MjAwMDBaMBsxGTAXBgNVBAMTEGNyYW4ucnN0dWRpby5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDYI7Fw82LOcVEPq9sh73uV2g1w5ncIiJxYF9F6 RfUcZS2DG/OSL6MtwB2WdaL4Oq4tPxAfn+nrPZKpwh4w9tb30iZsEvyaYJsQMy4h Hs2USDMLEuYlAquuRD5+aVRWetGdEzaIJEqRwIJab65ZaynuAjm2dzksyXC1BRud pFYp9Mxt06zST6qLSgVkHv3N39WBQJJHwnsyAsc878Ft0Z15r1fytM4F0B/FEBm2 msm8IHx3mAusY8kG+wf2k4tUx3630IsxfgnmhWRW4ngdh4dewQpQT5Jn3cBHnb4f ZGIVWpdXocidozCjA0trR2mpMsAd0k0oX6MOsG34V1zdFjkLAgMBAAGjggKiMIIC njAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUUKwy KZ005KuobE+g58lfgtQlWegwQgYDVR0RBDswOYIQY3Jhbi5yc3R1ZGlvLmNvbYIQ Y3Jhbi5yc3R1ZGlvLm9yZ4ITY2xvdWQuci1wcm9qZWN0Lm9yZzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw MKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy bDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFlXStlrwAABAMA RzBFAiEAuZ1Xyc+IaB00HCBXuONAf7zsZ90DO6BEn9NL/0tyUaMCIHpYW5CKdT2S SrWQfqIupIcatYjWTUwaJWj6ubwKxE21AHUAh3W/51l8+IxDmV+9827/Vo1HVjb/ SrVgwbTq/16ggw8AAAFlXStlqQAABAMARjBEAiA7simJMeZRSjoxjIbQJrScyOyA B5E8bKnRHiQoZT4CSAIgOiq2YnM+JbBZnRaSdUwGEumHxiKjaFGYu0HhQO9e2fUw DQYJKoZIhvcNAQELBQADggEBAF0lExjl14FEG0CY4Qv0i9DQxdzyqaE38nVX85dC 6lzFmB/sqU1B3OSHDsrQg4E2KkHRhq6hwj6RKKzn/RROai9oa7zik1V94SyOn1aG aepFBX+12rv2vNZUi9qE8vqtRxWfvfHjW2oTltv6XTFrcNwDdKkIrh403MtliALH tlMH0PaeVvhcTcvdHzTj9L4asH3u54breSgvHYETMnuUyQlsaxHXFcgw1SFDlhpR qnLArkqHFnAVAiPMyjlRqN7Scdb9QBwDH+szcN+DqsF+hA+c7OuCmaetcCxNVljz RzNS664x6pk1RV71FIR5C2CgtnLKbCbltr3ocAR6vNM0kk0= -----END CERTIFICATE-----"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_commonName",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "cran.rstudio.com"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_commonName_wo_SNI",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "request w/o SNI didn't succeed"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_subjectAltName",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "cran.rstudio.com cran.rstudio.org cloud.r-project.org"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_caIssuers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Amazon (Amazon from US)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_trust",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "Ok via SAN (SNI mandatory)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_chain_of_trust",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "passed."
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_certificatePolicies_EV",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "no"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_eTLS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not present"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_expiration_status",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "201 >= 60 days"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_notBefore",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "2018-08-20 20:00"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_notAfter",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "2019-09-21 08:00"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certs_countServer",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "4"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certs_list_ordering_problem",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "no"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_crlDistributionPoints",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_ocspURL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http://ocsp.sca1b.amazontrust.com"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "OCSP_stapling",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_mustStapleExtension",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DNS_CAArecord",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certificate_transparency",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "yes (certificate extension)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HTTP_status_code",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "200 OK ('/')"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HTTP_clock_skew",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "-509990 seconds from localtime"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HSTS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HPKP",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No support for HTTP Public Key Pinning"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_server",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Apache/2.4.33 (Unix)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_application",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No application banner found"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cookie_count",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "0 at '/'"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "security_headers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "MEDIUM",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_reverseproxy",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"cwe" : "CWE-200",
|
||
|
|
"finding" : "X-Cache: Hit from cloudfrontVia: 1.1 1d43f56d3213a63608863fd0e49585b9.cloudfront.net (CloudFront)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "heartbleed",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-0160",
|
||
|
|
"cwe" : "CWE-119",
|
||
|
|
"finding" : "not vulnerable, no heartbeat extension"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "CCS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-0224",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ticketbleed",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-9244",
|
||
|
|
"cwe" : "CWE-200",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ROBOT",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
|
||
|
|
"cwe" : "CWE-203",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "secure_renego",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2009-3555",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "secure_client_renego",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2009-3555",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "CRIME_TLS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2012-4929",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "BREACH",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2013-3587",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable, no HTTP compression - only supplied '/' tested"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "POODLE_SSL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-3566",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "fallback_SCSV",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SWEET32",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-2183 CVE-2016-6329",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "FREAK",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-0204",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DROWN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable to DROWN on this host and port"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DROWN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LOGJAM",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-4000",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable, no DH EXPORT ciphers,"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LOGJAM-common_primes",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-4000",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "no DH key with <= TLS 1.2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "BEAST",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2011-3389",
|
||
|
|
"cwe" : "CWE-20",
|
||
|
|
"finding" : "not vulnerable, no SSL3 or TLS1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LUCKY13",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"cve" : "CVE-2013-0169",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "potentially vulnerable, uses TLS CBC ciphers"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "RC4",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2013-2566 CVE-2015-2808",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc030",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc028",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc014",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x9d",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x35",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc02f",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc027",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc013",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x9c",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x3c",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x2f",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_422",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_442",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_500",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_60",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_70",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-chrome_65_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-chrome_70_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-firefox_59_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-firefox_62_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_6_xp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_7_vista",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_8_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_8_xp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win81",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_winphone81",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_13_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_13_winphone10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_15_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-opera_17_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_9_ios9",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_9_osx1011",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_10_osx1012",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-apple_ats_9_ios9",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-tor_1709_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_6u45",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_7u25",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_8u161",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_904",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-openssl_101l",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-openssl_102e",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.32",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "service",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "HTTP"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSLv2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSLv3",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_3",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not offered and downgraded to a weaker protocol"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "NPN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "offered with h2, http/1.1 (advertised)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ALPN_HTTP2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "h2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ALPN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http/1.1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_NULL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_aNULL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_EXPORT",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_LOW",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_3DES_IDEA",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_AVERAGE",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_STRONG",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS_ciphers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS_ECDHE_curves",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "prime256v1 secp384r1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_order",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "server"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "protocol_negotiated",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "Default protocol TLS1.2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_negotiated",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherorder_TLSv1_1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherorder_TLSv1_2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_extensions",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_session_ticket",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "valid for 10800 seconds only (<daily)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSL_sessionID_support",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "yes"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "sessionresumption_ticket",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "sessionresumption_ID",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_timestamp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "random"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_numbers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_signatureAlgorithm",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "SHA256 with RSA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_keySize",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "2048 bits"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_keyUsage",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Digital Signature, Key Encipherment"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_extKeyUsage",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "cert_ext_keyusage"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_serialNumber",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "02F71A9BDE122BE31B205369489BA219"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_fingerprintSHA1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "94F1FDFF2B9A4C8EB3840E5054D0DC335E395DEC"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_fingerprintSHA256",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "-----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIQAvcam94SK+MbIFNpSJuiGTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MjEwMDAwMDBaFw0xOTA5MjEx MjAwMDBaMBsxGTAXBgNVBAMTEGNyYW4ucnN0dWRpby5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDYI7Fw82LOcVEPq9sh73uV2g1w5ncIiJxYF9F6 RfUcZS2DG/OSL6MtwB2WdaL4Oq4tPxAfn+nrPZKpwh4w9tb30iZsEvyaYJsQMy4h Hs2USDMLEuYlAquuRD5+aVRWetGdEzaIJEqRwIJab65ZaynuAjm2dzksyXC1BRud pFYp9Mxt06zST6qLSgVkHv3N39WBQJJHwnsyAsc878Ft0Z15r1fytM4F0B/FEBm2 msm8IHx3mAusY8kG+wf2k4tUx3630IsxfgnmhWRW4ngdh4dewQpQT5Jn3cBHnb4f ZGIVWpdXocidozCjA0trR2mpMsAd0k0oX6MOsG34V1zdFjkLAgMBAAGjggKiMIIC njAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUUKwy KZ005KuobE+g58lfgtQlWegwQgYDVR0RBDswOYIQY3Jhbi5yc3R1ZGlvLmNvbYIQ Y3Jhbi5yc3R1ZGlvLm9yZ4ITY2xvdWQuci1wcm9qZWN0Lm9yZzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw MKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy bDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFlXStlrwAABAMA RzBFAiEAuZ1Xyc+IaB00HCBXuONAf7zsZ90DO6BEn9NL/0tyUaMCIHpYW5CKdT2S SrWQfqIupIcatYjWTUwaJWj6ubwKxE21AHUAh3W/51l8+IxDmV+9827/Vo1HVjb/ SrVgwbTq/16ggw8AAAFlXStlqQAABAMARjBEAiA7simJMeZRSjoxjIbQJrScyOyA B5E8bKnRHiQoZT4CSAIgOiq2YnM+JbBZnRaSdUwGEumHxiKjaFGYu0HhQO9e2fUw DQYJKoZIhvcNAQELBQADggEBAF0lExjl14FEG0CY4Qv0i9DQxdzyqaE38nVX85dC 6lzFmB/sqU1B3OSHDsrQg4E2KkHRhq6hwj6RKKzn/RROai9oa7zik1V94SyOn1aG aepFBX+12rv2vNZUi9qE8vqtRxWfvfHjW2oTltv6XTFrcNwDdKkIrh403MtliALH tlMH0PaeVvhcTcvdHzTj9L4asH3u54breSgvHYETMnuUyQlsaxHXFcgw1SFDlhpR qnLArkqHFnAVAiPMyjlRqN7Scdb9QBwDH+szcN+DqsF+hA+c7OuCmaetcCxNVljz RzNS664x6pk1RV71FIR5C2CgtnLKbCbltr3ocAR6vNM0kk0= -----END CERTIFICATE-----"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_commonName",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "cran.rstudio.com"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_commonName_wo_SNI",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "request w/o SNI didn't succeed"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_subjectAltName",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "cran.rstudio.com cran.rstudio.org cloud.r-project.org"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_caIssuers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Amazon (Amazon from US)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_trust",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "Ok via SAN (SNI mandatory)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_chain_of_trust",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "passed."
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_certificatePolicies_EV",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "no"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_eTLS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not present"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_expiration_status",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "201 >= 60 days"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_notBefore",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "2018-08-20 20:00"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_notAfter",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "2019-09-21 08:00"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certs_countServer",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "4"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certs_list_ordering_problem",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "no"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_crlDistributionPoints",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_ocspURL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http://ocsp.sca1b.amazontrust.com"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "OCSP_stapling",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_mustStapleExtension",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DNS_CAArecord",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certificate_transparency",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "yes (certificate extension)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HTTP_status_code",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "200 OK ('/')"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HTTP_clock_skew",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "-510055 seconds from localtime"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HSTS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HPKP",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No support for HTTP Public Key Pinning"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_server",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Apache/2.4.33 (Unix)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_application",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No application banner found"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cookie_count",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "0 at '/'"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "security_headers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "MEDIUM",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_reverseproxy",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"cwe" : "CWE-200",
|
||
|
|
"finding" : "X-Cache: Hit from cloudfrontVia: 1.1 829eee129e6b5002d6c1a37f04888da1.cloudfront.net (CloudFront)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "heartbleed",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-0160",
|
||
|
|
"cwe" : "CWE-119",
|
||
|
|
"finding" : "not vulnerable, no heartbeat extension"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "CCS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-0224",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ticketbleed",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-9244",
|
||
|
|
"cwe" : "CWE-200",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ROBOT",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
|
||
|
|
"cwe" : "CWE-203",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "secure_renego",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2009-3555",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "secure_client_renego",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2009-3555",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "CRIME_TLS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2012-4929",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "BREACH",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2013-3587",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable, no HTTP compression - only supplied '/' tested"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "POODLE_SSL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-3566",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "fallback_SCSV",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SWEET32",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-2183 CVE-2016-6329",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "FREAK",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-0204",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DROWN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable to DROWN on this host and port"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DROWN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LOGJAM",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-4000",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable, no DH EXPORT ciphers,"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LOGJAM-common_primes",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-4000",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "no DH key with <= TLS 1.2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "BEAST",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2011-3389",
|
||
|
|
"cwe" : "CWE-20",
|
||
|
|
"finding" : "not vulnerable, no SSL3 or TLS1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LUCKY13",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"cve" : "CVE-2013-0169",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "potentially vulnerable, uses TLS CBC ciphers"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "RC4",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2013-2566 CVE-2015-2808",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc030",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc028",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc014",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x9d",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x35",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc02f",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc027",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc013",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x9c",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x3c",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x2f",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_422",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_442",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_500",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_60",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_70",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-chrome_65_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-chrome_70_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-firefox_59_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-firefox_62_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_6_xp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_7_vista",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_8_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_8_xp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win81",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_winphone81",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_13_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_13_winphone10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_15_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-opera_17_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_9_ios9",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_9_osx1011",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_10_osx1012",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-apple_ats_9_ios9",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-tor_1709_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_6u45",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_7u25",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_8u161",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_904",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-openssl_101l",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-openssl_102e",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.62",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "service",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "HTTP"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSLv2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSLv3",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS1_3",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not offered and downgraded to a weaker protocol"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "NPN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "offered with h2, http/1.1 (advertised)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ALPN_HTTP2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "h2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ALPN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http/1.1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_NULL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_aNULL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_EXPORT",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_LOW",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_3DES_IDEA",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_AVERAGE",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherlist_STRONG",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS_ciphers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "PFS_ECDHE_curves",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "prime256v1 secp384r1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_order",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "server"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "protocol_negotiated",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "Default protocol TLS1.2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_negotiated",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherorder_TLSv1_1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipherorder_TLSv1_2",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_extensions",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'status request/#5' 'application layer protocol negotiation/#16'"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_session_ticket",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "valid for 10800 seconds only (<daily)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SSL_sessionID_support",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "yes"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "sessionresumption_ticket",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "sessionresumption_ID",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "TLS_timestamp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "random"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_numbers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_signatureAlgorithm",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "SHA256 with RSA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_keySize",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "2048 bits"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_keyUsage",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Digital Signature, Key Encipherment"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_extKeyUsage",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "cert_ext_keyusage"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_serialNumber",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "02F71A9BDE122BE31B205369489BA219"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_fingerprintSHA1",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "94F1FDFF2B9A4C8EB3840E5054D0DC335E395DEC"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_fingerprintSHA256",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "-----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIQAvcam94SK+MbIFNpSJuiGTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MjEwMDAwMDBaFw0xOTA5MjEx MjAwMDBaMBsxGTAXBgNVBAMTEGNyYW4ucnN0dWRpby5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDYI7Fw82LOcVEPq9sh73uV2g1w5ncIiJxYF9F6 RfUcZS2DG/OSL6MtwB2WdaL4Oq4tPxAfn+nrPZKpwh4w9tb30iZsEvyaYJsQMy4h Hs2USDMLEuYlAquuRD5+aVRWetGdEzaIJEqRwIJab65ZaynuAjm2dzksyXC1BRud pFYp9Mxt06zST6qLSgVkHv3N39WBQJJHwnsyAsc878Ft0Z15r1fytM4F0B/FEBm2 msm8IHx3mAusY8kG+wf2k4tUx3630IsxfgnmhWRW4ngdh4dewQpQT5Jn3cBHnb4f ZGIVWpdXocidozCjA0trR2mpMsAd0k0oX6MOsG34V1zdFjkLAgMBAAGjggKiMIIC njAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUUKwy KZ005KuobE+g58lfgtQlWegwQgYDVR0RBDswOYIQY3Jhbi5yc3R1ZGlvLmNvbYIQ Y3Jhbi5yc3R1ZGlvLm9yZ4ITY2xvdWQuci1wcm9qZWN0Lm9yZzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw MKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy bDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFlXStlrwAABAMA RzBFAiEAuZ1Xyc+IaB00HCBXuONAf7zsZ90DO6BEn9NL/0tyUaMCIHpYW5CKdT2S SrWQfqIupIcatYjWTUwaJWj6ubwKxE21AHUAh3W/51l8+IxDmV+9827/Vo1HVjb/ SrVgwbTq/16ggw8AAAFlXStlqQAABAMARjBEAiA7simJMeZRSjoxjIbQJrScyOyA B5E8bKnRHiQoZT4CSAIgOiq2YnM+JbBZnRaSdUwGEumHxiKjaFGYu0HhQO9e2fUw DQYJKoZIhvcNAQELBQADggEBAF0lExjl14FEG0CY4Qv0i9DQxdzyqaE38nVX85dC 6lzFmB/sqU1B3OSHDsrQg4E2KkHRhq6hwj6RKKzn/RROai9oa7zik1V94SyOn1aG aepFBX+12rv2vNZUi9qE8vqtRxWfvfHjW2oTltv6XTFrcNwDdKkIrh403MtliALH tlMH0PaeVvhcTcvdHzTj9L4asH3u54breSgvHYETMnuUyQlsaxHXFcgw1SFDlhpR qnLArkqHFnAVAiPMyjlRqN7Scdb9QBwDH+szcN+DqsF+hA+c7OuCmaetcCxNVljz RzNS664x6pk1RV71FIR5C2CgtnLKbCbltr3ocAR6vNM0kk0= -----END CERTIFICATE-----"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_commonName",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "cran.rstudio.com"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_commonName_wo_SNI",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "request w/o SNI didn't succeed"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_subjectAltName",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "cran.rstudio.com cran.rstudio.org cloud.r-project.org"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_caIssuers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Amazon (Amazon from US)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_trust",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "Ok via SAN (SNI mandatory)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_chain_of_trust",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "passed."
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_certificatePolicies_EV",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "no"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_eTLS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "not present"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_expiration_status",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "201 >= 60 days"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_notBefore",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "2018-08-20 20:00"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_notAfter",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "2019-09-21 08:00"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certs_countServer",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "4"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certs_list_ordering_problem",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "no"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_crlDistributionPoints",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_ocspURL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "http://ocsp.sca1b.amazontrust.com"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "OCSP_stapling",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cert_mustStapleExtension",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DNS_CAArecord",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "certificate_transparency",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "yes (certificate extension)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HTTP_status_code",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "200 OK ('/')"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HTTP_clock_skew",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "-510129 seconds from localtime"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HSTS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"finding" : "not offered"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "HPKP",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No support for HTTP Public Key Pinning"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_server",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "Apache/2.4.33 (Unix)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_application",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No application banner found"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cookie_count",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "0 at '/'"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "security_headers",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "MEDIUM",
|
||
|
|
"finding" : "--"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "banner_reverseproxy",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"cwe" : "CWE-200",
|
||
|
|
"finding" : "X-Cache: Hit from cloudfrontVia: 1.1 ec7268fa1110683dbc457e57c2be1475.cloudfront.net (CloudFront)"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "heartbleed",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-0160",
|
||
|
|
"cwe" : "CWE-119",
|
||
|
|
"finding" : "not vulnerable, no heartbeat extension"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "CCS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-0224",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ticketbleed",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-9244",
|
||
|
|
"cwe" : "CWE-200",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "ROBOT",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
|
||
|
|
"cwe" : "CWE-203",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "secure_renego",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2009-3555",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "secure_client_renego",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2009-3555",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "CRIME_TLS",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2012-4929",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "BREACH",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2013-3587",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable, no HTTP compression - only supplied '/' tested"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "POODLE_SSL",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2014-3566",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "fallback_SCSV",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"finding" : "supported"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "SWEET32",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-2183 CVE-2016-6329",
|
||
|
|
"cwe" : "CWE-327",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "FREAK",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-0204",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DROWN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable to DROWN on this host and port"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "DROWN",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LOGJAM",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-4000",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable, no DH EXPORT ciphers,"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LOGJAM-common_primes",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2015-4000",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "no DH key with <= TLS 1.2"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "BEAST",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2011-3389",
|
||
|
|
"cwe" : "CWE-20",
|
||
|
|
"finding" : "not vulnerable, no SSL3 or TLS1"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "LUCKY13",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "LOW",
|
||
|
|
"cve" : "CVE-2013-0169",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "potentially vulnerable, uses TLS CBC ciphers"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "RC4",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "OK",
|
||
|
|
"cve" : "CVE-2013-2566 CVE-2015-2808",
|
||
|
|
"cwe" : "CWE-310",
|
||
|
|
"finding" : "not vulnerable"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc030",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc028",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc014",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x9d",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x35",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc02f",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc027",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_xc013",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x9c",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x3c",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "cipher_x2f",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_422",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_442",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_500",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_60",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-android_70",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-chrome_65_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-chrome_70_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-firefox_59_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-firefox_62_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_6_xp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_7_vista",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_8_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_8_xp",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win81",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_winphone81",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-ie_11_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_13_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_13_winphone10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-edge_15_win10",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-opera_17_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_9_ios9",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_9_osx1011",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-safari_10_osx1012",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-apple_ats_9_ios9",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-tor_1709_win7",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_6u45",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_7u25",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "No connection"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_8u161",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-java_904",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-openssl_101l",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "clientsimulation-openssl_102e",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
||
|
|
}
|
||
|
|
, {
|
||
|
|
"id" : "scanTime",
|
||
|
|
"ip" : "cloud.r-project.org/52.85.89.115",
|
||
|
|
"port" : "443",
|
||
|
|
"severity" : "INFO",
|
||
|
|
"finding" : "277"
|
||
|
|
}
|
||
|
|
]
|