[ { "id" : "service", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "HTTP" } , { "id" : "SSLv2", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "SSLv3", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "TLS1", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "offered" } , { "id" : "TLS1_1", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "offered" } , { "id" : "TLS1_2", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "TLS1_3", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "not offered and downgraded to a weaker protocol" } , { "id" : "NPN", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "offered with http/1.1 (advertised)" } , { "id" : "ALPN", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "http/1.1" } , { "id" : "cipherlist_NULL", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_aNULL", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_EXPORT", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_LOW", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_3DES_IDEA", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "HIGH", "cwe" : "CWE-310", "finding" : "offered" } , { "id" : "cipherlist_AVERAGE", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "LOW", "cwe" : "CWE-310", "finding" : "offered" } , { "id" : "cipherlist_STRONG", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "MEDIUM", "finding" : "No ciphers supporting (P)FS offered" } , { "id" : "cipher_order", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "finding" : "server" } , { "id" : "protocol_negotiated", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "finding" : "Default protocol TLS1.2" } , { "id" : "cipher_negotiated", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "OK", "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" } , { "id" : "cipherorder_TLSv1", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" } , { "id" : "cipherorder_TLSv1_1", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" } , { "id" : "cipherorder_TLSv1_2", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DES-CBC3-SHA" } , { "id" : "TLS_extensions", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'next protocol/#13172' 'application layer protocol negotiation/#16'" } , { "id" : "TLS_session_ticket", "ip" : "cran.asia/45.32.110.120", "port" : "443", "severity" : "INFO", "finding" : "valid for 86400 seconds only (