Date: Mon, 22 Aug 2016 15:58:02 +0300 From: Jani Kenttala <jkenttal@...oulu.fi> To: Solar Designer <solar@...nwall.com> Cc: oss-security@...ts.openwall.com, Mauri Miettinen <Mauri.Miettinen@...dent.oulu.fi>, ouspg@...oulu.fi Subject: Re: TLS testing results - OS distro vulnerabilities On Mon, Aug 22, 2016 at 02:19:11PM +0300, Solar Designer wrote: > On Mon, Aug 22, 2016 at 10:46:24AM +0200, Jakub Wilk wrote: > > * Mauri Miettinen <Mauri.Miettinen@...dent.oulu.fi>, 2016-08-20, 16:50: -snip- > > >Results are available from: > > > > > >https://github.com/ouspg/trytls/blob/shootout-0.3/shootout/README.md > > > > How did you manage to run tests against Debian 7 (wheezy)? Your setup.py > > requires Python 2.7.9 or 3.4.0, but wheezy has only 2.7.3/3.2.3. > > I think Mauri isn't subscribed - CC'ing. > > Alexander Hi! We used self-compiled python to run the tests against the older python bundled with the OS (see Dockerfile at https://github.com/ouspg/trytls/blob/shootout-0.3/shootout/debian-7/Dockerfile). To elaborate a bit, we are actually looking two different set of requirements. 1) TryTLS runner itself requires 2.7.9 or 3.4.0 2) However, it can call older python version (or what ever command) when executing the tests. That being said, python2-urllib2 did not execute cleanly with 2.7.3. There is a pull request about that <https://github.com/ouspg/trytls/pull/237>, and the corresponding result has been marked as N/A in the summary table. -- -Jani
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ