Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

by default sslyze is now skipping secure header check #645

Open
KIT-GregC opened this issue Apr 4, 2024 · 0 comments
Open

by default sslyze is now skipping secure header check #645

KIT-GregC opened this issue Apr 4, 2024 · 0 comments

Comments

@KIT-GregC
Copy link

Describe the bug
The documentation for sslyze describes that "all checks" will be run if you simply pass a target. This used to in include --http_headers . I must now pass those arguments separately and run two scans
To Reproduce
Steps to reproduce the behavior:

  1. Install SSLyze using '...' [e.g. pip, git]
  2. Run the following command python3 sslyze -m www.ftd.com
  3. Note: no hsts or other header information
  4. Run the following command python3 sslyze -m --http_headers www.ftd.com
  5. Note: ONLY HSTS information is returned

I believe there used to be a --regular option to run all scans. It is ok not to have that as long as you maintain "umbrella check" operation.

Expected behavior
All checks should be run as advertised
Python environment (please complete the following information):

  • OS: MacOS Sonoma 14.4.1
  • Python version: 3.11.6

Additional context
Add any other context about the problem here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant