Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 22 Aug 2016 15:58:02 +0300
From: Jani Kenttala <jkenttal@...oulu.fi>
To: Solar Designer <solar@...nwall.com>
Cc: oss-security@...ts.openwall.com,
        Mauri Miettinen <Mauri.Miettinen@...dent.oulu.fi>, ouspg@...oulu.fi
Subject: Re: TLS testing results - OS distro vulnerabilities

On Mon, Aug 22, 2016 at 02:19:11PM +0300, Solar Designer wrote:
> On Mon, Aug 22, 2016 at 10:46:24AM +0200, Jakub Wilk wrote:
> > * Mauri Miettinen <Mauri.Miettinen@...dent.oulu.fi>, 2016-08-20, 16:50:
-snip-
> > >Results are available from:
> > >
> > >https://github.com/ouspg/trytls/blob/shootout-0.3/shootout/README.md
> > 
> > How did you manage to run tests against Debian 7 (wheezy)? Your setup.py 
> > requires Python 2.7.9 or 3.4.0, but wheezy has only 2.7.3/3.2.3.
> 
> I think Mauri isn't subscribed - CC'ing.
> 
> Alexander

Hi!

We used self-compiled python to run the tests against the older python bundled with the OS 
(see Dockerfile at https://github.com/ouspg/trytls/blob/shootout-0.3/shootout/debian-7/Dockerfile).

To elaborate a bit, we are actually looking two different set of requirements.

1) TryTLS runner itself requires 2.7.9 or 3.4.0
2) However, it can call older python version (or what ever command) when executing the tests.

That being said, python2-urllib2 did not execute cleanly with 2.7.3. 
There is a pull request about that <https://github.com/ouspg/trytls/pull/237>, 
and the corresponding result has been marked as N/A in the summary table.

-- 
-Jani

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ