Exploring CRAN claims of the "security" of CRAN mirrors
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 

1069 lines
48 KiB

[
{
"id" : "service",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "HTTP"
}
, {
"id" : "SSLv2",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "not offered"
}
, {
"id" : "SSLv3",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "not offered"
}
, {
"id" : "TLS1",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "offered"
}
, {
"id" : "TLS1_1",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "offered"
}
, {
"id" : "TLS1_2",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "offered"
}
, {
"id" : "TLS1_3",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "not offered and downgraded to a weaker protocol"
}
, {
"id" : "NPN",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "not offered"
}
, {
"id" : "ALPN",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "http/1.1"
}
, {
"id" : "cipherlist_NULL",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cwe" : "CWE-327",
"finding" : "not offered"
}
, {
"id" : "cipherlist_aNULL",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cwe" : "CWE-327",
"finding" : "not offered"
}
, {
"id" : "cipherlist_EXPORT",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cwe" : "CWE-327",
"finding" : "not offered"
}
, {
"id" : "cipherlist_LOW",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "CRITICAL",
"cwe" : "CWE-327",
"finding" : "offered"
}
, {
"id" : "cipherlist_3DES_IDEA",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cwe" : "CWE-310",
"finding" : "not offered"
}
, {
"id" : "cipherlist_AVERAGE",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "LOW",
"cwe" : "CWE-310",
"finding" : "offered"
}
, {
"id" : "cipherlist_STRONG",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "offered"
}
, {
"id" : "PFS",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "offered"
}
, {
"id" : "PFS_ciphers",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA"
}
, {
"id" : "PFS_ECDHE_curves",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "secp256k1 prime256v1 secp384r1 secp521r1"
}
, {
"id" : "DH_groups",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "RFC3526/Oakley Group 16"
}
, {
"id" : "cipher_order",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "server"
}
, {
"id" : "protocol_negotiated",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "Default protocol TLS1.2"
}
, {
"id" : "cipher_negotiated",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)"
}
, {
"id" : "cipherorder_TLSv1",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-RC4-SHA AES128-SHA AES256-SHA RC4-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA"
}
, {
"id" : "cipherorder_TLSv1_1",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-RC4-SHA AES128-SHA AES256-SHA RC4-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA"
}
, {
"id" : "cipherorder_TLSv1_2",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 ECDHE-RSA-RC4-SHA AES128-SHA256 AES128-SHA AES256-SHA256 AES256-SHA RC4-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA"
}
, {
"id" : "TLS_extensions",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'"
}
, {
"id" : "TLS_session_ticket",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "valid for 300 seconds only (<daily)"
}
, {
"id" : "SSL_sessionID_support",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "yes"
}
, {
"id" : "sessionresumption_ticket",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "supported"
}
, {
"id" : "sessionresumption_ID",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "supported"
}
, {
"id" : "TLS_timestamp",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "random"
}
, {
"id" : "cert_numbers",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "1"
}
, {
"id" : "cert_signatureAlgorithm",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "SHA256 with RSA"
}
, {
"id" : "cert_keySize",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "4096 bits"
}
, {
"id" : "cert_keyUsage",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "Digital Signature, Key Encipherment"
}
, {
"id" : "cert_extKeyUsage",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "cert_ext_keyusage"
}
, {
"id" : "cert_serialNumber",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "B806264ED1B534146CEBAE92FB97621F"
}
, {
"id" : "cert_fingerprintSHA1",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "A817DBC0EEF40F04D4FB9CC24BFC10F803774830"
}
, {
"id" : "cert_fingerprintSHA256",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "DCD7A10D8D0F4412530AC09253C2B3E7F4757FB0D0128B02A970C95EA29E2920"
}
, {
"id" : "cert",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "-----BEGIN CERTIFICATE----- MIIIXTCCB0WgAwIBAgIRALgGJk7RtTQUbOuukvuXYh8wDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTgwMzI5MDAwMDAwWhcNMjAwMzI4 MjM1OTU5WjCCARAxCzAJBgNVBAYTAlVTMQ4wDAYDVQQREwU1MDAxMTELMAkGA1UE CBMCSUExDTALBgNVBAcTBEFtZXMxFjAUBgNVBAkTDTIwMiBDYXR0IEhhbGwxODA2 BgNVBAkTL0lvd2EgU3RhdGUgVW5pdmVyc2l0eSBvZiBTY2llbmNlIGFuZCBUZWNo bm9sb2d5MTgwNgYDVQQKEy9Jb3dhIFN0YXRlIFVuaXZlcnNpdHkgb2YgU2NpZW5j ZSBhbmQgVGVjaG5vbG9neTEtMCsGA1UECxMkQ29sbGVnZSBvZiBMaWJlcmFsIEFy dHMgYW5kIFNjaWVuY2VzMRowGAYDVQQDDBEqLmxhcy5pYXN0YXRlLmVkdTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOeUAUc9jC2qC4avmh3kSJ3mfwvz maJIpAuP9URNGCN8QPlzOcg/NXTRiRhFhhiJOjDFmxj2yUZKFFtskHdNc/+2lgcM wfRSGwYJCznGGX8/IOMuvzpRaVSI3SC5Ru6m7vwOVBLhmBkyqk05s96JyyAErG8B IGpxAL/FC+udHznpcsTQxYQsxfS5GiXZTvb3/Su+mTfrE/PnwBQFmKLXuE8uuG5N jZZ97CLjYS0Um7tXXEG7NmbrISkusELd3YfAo1BeUSOPirqsw5vTYpNlu/E9TYvA Bk3YJ3EG3d3MhO0oBDiFYY0WrSbcwJCPXLhMRIlVlZPdMTs56Sa7jhb5Utcuet5H HUgSdHfjDVD8nXhELt81NPLqfHm15eBpkDhLO4G+K6olZCJ3EqzuLMPnb/B93kSq azflLfAeG251YtsrvXppGSZnzaoldNoDa6J6zk+WlE/j0ZGFqCn77a10A87yCFrP iyN64eG1ZqR39gacoaiFG+7ij7ENrm3HRFAm85vqcIke6HsVMpwiA/DNPH9gZA1m XuV0YGmBNe4meSoEaUNdOjmorp6WmOiV9sJr5g56qJ9qv9n5FMIcSEPzWtLPYLKj nZJLKmYH0MvtATeeG6MhgxwccaeyQSQ+JF3jfUc67BySbCCTj0ke1aKmOglW7Wko IZ5QMIryBuvixoBfAgMBAAGjggNIMIIDRDAfBgNVHSMEGDAWgBQeBaN3j2yW4luH S6a0hqxxAAznODAdBgNVHQ4EFgQUY0aC85p67Jc95NYNHOyMn1ltl5wwDgYDVR0P AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMGcGA1UdIARgMF4wUgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYBBQUHAgEW NGh0dHBzOi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkvY3BzX3Nz bC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwuaW5j b21tb24tcnNhLm9yZy9JbkNvbW1vblJTQVNlcnZlckNBLmNybDB1BggrBgEFBQcB AQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9JbkNv bW1vblJTQVNlcnZlckNBXzIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51 c2VydHJ1c3QuY29tMBwGA1UdEQQVMBOCESoubGFzLmlhc3RhdGUuZWR1MIIBfwYK KwYBBAHWeQIEAgSCAW8EggFrAWkAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMA xHuJeqj9ywAAAWJye13QAAAEAwBIMEYCIQCUAI0svhb8ToVUTFUYmCGTkmVLyX9T Q35Y8PrK4P0pmgIhAJFYzVehtmZH/+pHbCyhbiQzkemfFwejQ8rWlL/f6dfxAHYA Xqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFicnteJQAABAMARzBF AiAgTLbPQC/DOzEhWxMBjBwU3ihY80SeTQIeKL0ixGcWDwIhAP3+enwjFy7Jby6t zU7a72vJXfP/3bD5vXFzcpqn8tQdAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp Bo2yCJo32RMAAAFicntdxwAABAMARzBFAiEAiho4D83n/0V/yZTlk0mH57mjEghk Je1Bt/YiLicN2RsCIATlKnpgxhlYygpK7cGWQ9pBx2d3NEiBI9DypNgTAR8xMA0G CSqGSIb3DQEBCwUAA4IBAQBYXsfFkf88mnup6NYfGb8kAkPHwZPx5N3MKAocRLxl DATwDWP+rqZILnHVWEfMqG1uUFkVNzyVqmJzUl/Nsnq4qJXhM7ctZkYUXlhvtngq x1wwIAgbp7K5+mjW6bFBSNkQFS2TBszx/cTT5iHyWSEQ+Wu/H2KHEdwyle+6+2yB hzCuiZo8hSkAiODFq+btSEz8+n+PJz9ae0+0mcQi6zWNPYQRWTJtq9exAUBejy5U X78uqahwhliJO8+aqh87GpT5TUPHX1C+kK3q8FPNp7jO0yMIUNcd/LwOdW4vtv2e mmA4nQCbjcKwdKD+wE3XkVjBHXWu/4mF0WUjaydDTz3l -----END CERTIFICATE-----"
}
, {
"id" : "cert_commonName",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "*.las.iastate.edu"
}
, {
"id" : "cert_commonName_wo_SNI",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "*.las.iastate.edu"
}
, {
"id" : "cert_subjectAltName",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "*.las.iastate.edu"
}
, {
"id" : "cert_caIssuers",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "InCommon RSA Server CA (Internet2 from US)"
}
, {
"id" : "cert_trust",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
}
, {
"id" : "cert_chain_of_trust",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "passed."
}
, {
"id" : "cert_certificatePolicies_EV",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "no"
}
, {
"id" : "cert_eTLS",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "not present"
}
, {
"id" : "cert_expiration_status",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "391 >= 60 days"
}
, {
"id" : "cert_notBefore",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "2018-03-28 20:00"
}
, {
"id" : "cert_notAfter",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "2020-03-28 19:59"
}
, {
"id" : "certs_countServer",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "4"
}
, {
"id" : "certs_list_ordering_problem",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "no"
}
, {
"id" : "cert_crlDistributionPoints",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl"
}
, {
"id" : "cert_ocspURL",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "http://ocsp.usertrust.com"
}
, {
"id" : "OCSP_stapling",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "LOW",
"finding" : "not offered"
}
, {
"id" : "cert_mustStapleExtension",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "--"
}
, {
"id" : "DNS_CAArecord",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "LOW",
"finding" : "--"
}
, {
"id" : "certificate_transparency",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "yes (certificate extension)"
}
, {
"id" : "HTTP_status_code",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "200 OK ('/CRAN/')"
}
, {
"id" : "HTTP_clock_skew",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "0 seconds from localtime"
}
, {
"id" : "HSTS",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "LOW",
"finding" : "not offered"
}
, {
"id" : "HPKP",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "No support for HTTP Public Key Pinning"
}
, {
"id" : "banner_server",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "Apache/2.4.34 (Red Hat) OpenSSL/1.0.2k-fips"
}
, {
"id" : "banner_application",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "No application banner found"
}
, {
"id" : "cookie_count",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "0 at '/CRAN/'"
}
, {
"id" : "security_headers",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "MEDIUM",
"finding" : "--"
}
, {
"id" : "banner_reverseproxy",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"cwe" : "CWE-200",
"finding" : "--"
}
, {
"id" : "heartbleed",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2014-0160",
"cwe" : "CWE-119",
"finding" : "not vulnerable , timed out"
}
, {
"id" : "CCS",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2014-0224",
"cwe" : "CWE-310",
"finding" : "not vulnerable"
}
, {
"id" : "ticketbleed",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2016-9244",
"cwe" : "CWE-200",
"finding" : "not vulnerable"
}
, {
"id" : "ROBOT",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
"cwe" : "CWE-203",
"finding" : "not vulnerable"
}
, {
"id" : "secure_renego",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2009-3555",
"cwe" : "CWE-310",
"finding" : "not vulnerable"
}
, {
"id" : "secure_client_renego",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2009-3555",
"cwe" : "CWE-310",
"finding" : "not vulnerable"
}
, {
"id" : "CRIME_TLS",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2012-4929",
"cwe" : "CWE-310",
"finding" : "not vulnerable"
}
, {
"id" : "BREACH",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2013-3587",
"cwe" : "CWE-310",
"finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested"
}
, {
"id" : "POODLE_SSL",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2014-3566",
"cwe" : "CWE-310",
"finding" : "not vulnerable"
}
, {
"id" : "fallback_SCSV",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"finding" : "supported"
}
, {
"id" : "SWEET32",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2016-2183 CVE-2016-6329",
"cwe" : "CWE-327",
"finding" : "not vulnerable"
}
, {
"id" : "FREAK",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2015-0204",
"cwe" : "CWE-310",
"finding" : "not vulnerable"
}
, {
"id" : "DROWN",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2016-0800 CVE-2016-0703",
"cwe" : "CWE-310",
"finding" : "not vulnerable to DROWN on this host and port"
}
, {
"id" : "DROWN",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"cve" : "CVE-2016-0800 CVE-2016-0703",
"cwe" : "CWE-310",
"finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=DCD7A10D8D0F4412530AC09253C2B3E7F4757FB0D0128B02A970C95EA29E2920"
}
, {
"id" : "LOGJAM-common_primes",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"cve" : "CVE-2015-4000",
"cwe" : "CWE-310",
"finding" : "RFC3526/Oakley Group 16"
}
, {
"id" : "LOGJAM",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "OK",
"cve" : "CVE-2015-4000",
"cwe" : "CWE-310",
"finding" : "not vulnerable, no DH EXPORT ciphers,"
}
, {
"id" : "BEAST_CBC_TLS1",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "MEDIUM",
"cve" : "CVE-2011-3389",
"cwe" : "CWE-20",
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA"
}
, {
"id" : "BEAST",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "LOW",
"cve" : "CVE-2011-3389",
"cwe" : "CWE-20",
"finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)"
}
, {
"id" : "LUCKY13",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "LOW",
"cve" : "CVE-2013-0169",
"cwe" : "CWE-310",
"finding" : "potentially vulnerable, uses TLS CBC ciphers"
}
, {
"id" : "RC4",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "HIGH",
"cve" : "CVE-2013-2566 CVE-2015-2808",
"cwe" : "CWE-310",
"finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA"
}
, {
"id" : "cipher_xc030",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
}
, {
"id" : "cipher_xc028",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
}
, {
"id" : "cipher_xc014",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
}
, {
"id" : "cipher_x9f",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 4096 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
}
, {
"id" : "cipher_x6b",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x6b DHE-RSA-AES256-SHA256 DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
}
, {
"id" : "cipher_x39",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
}
, {
"id" : "cipher_x88",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 4096 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
}
, {
"id" : "cipher_x9d",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384"
}
, {
"id" : "cipher_x3d",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256"
}
, {
"id" : "cipher_x35",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA"
}
, {
"id" : "cipher_x84",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
}
, {
"id" : "cipher_xc02f",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
}
, {
"id" : "cipher_xc027",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
}
, {
"id" : "cipher_xc013",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
}
, {
"id" : "cipher_x9e",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
}
, {
"id" : "cipher_x67",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x67 DHE-RSA-AES128-SHA256 DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
}
, {
"id" : "cipher_x33",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
}
, {
"id" : "cipher_x45",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 4096 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
}
, {
"id" : "cipher_x9c",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256"
}
, {
"id" : "cipher_x3c",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256"
}
, {
"id" : "cipher_x2f",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA"
}
, {
"id" : "cipher_x41",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
}
, {
"id" : "cipher_xc011",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 256 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA"
}
, {
"id" : "cipher_x05",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA"
}
, {
"id" : "clientsimulation-android_422",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
}
, {
"id" : "clientsimulation-android_442",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-android_500",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-android_60",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-android_70",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-chrome_65_win7",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-chrome_70_win10",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-firefox_59_win7",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-firefox_62_win7",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-ie_6_xp",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "No connection"
}
, {
"id" : "clientsimulation-ie_7_vista",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
}
, {
"id" : "clientsimulation-ie_8_win7",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
}
, {
"id" : "clientsimulation-ie_8_xp",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.0 RC4-SHA"
}
, {
"id" : "clientsimulation-ie_11_win7",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-ie_11_win81",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-ie_11_winphone81",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
}
, {
"id" : "clientsimulation-ie_11_win10",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-edge_13_win10",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-edge_13_winphone10",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-edge_15_win10",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-opera_17_win7",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
}
, {
"id" : "clientsimulation-safari_9_ios9",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-safari_9_osx1011",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-safari_10_osx1012",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-apple_ats_9_ios9",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-tor_1709_win7",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
}
, {
"id" : "clientsimulation-java_6u45",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "No connection"
}
, {
"id" : "clientsimulation-java_7u25",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
}
, {
"id" : "clientsimulation-java_8u161",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-java_904",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-openssl_101l",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "clientsimulation-openssl_102e",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
}
, {
"id" : "scanTime",
"ip" : "mirror.las.iastate.edu/129.186.138.51",
"port" : "443",
"severity" : "INFO",
"finding" : "138"
}
]