@@ -30,7 +30,7 @@ services:

# Only build pull requests, pushes to the master branch, and branches

# starting with `test-`. This is a convenient way to push branches to

# your own fork of the repostiory to ensure Travis passes before submitting

# your own fork of the repository to ensure Travis passes before submitting

# a PR. For instance, you might run:

# git push myremote branchname:test-branchname

branches:

@@ -176,7 +176,7 @@ type Response struct {

Messages []ResponseMessage `json:"messages"`

}

// NewSuccessResponse is a shortcut for creating new successul API

// NewSuccessResponse is a shortcut for creating new successful API

// responses.

func NewSuccessResponse(result interface{}) Response {

return Response{

@@ -62,7 +62,7 @@ func (h *Handler) Handle(w http.ResponseWriter, r *http.Request) error {

case "certificate":

bundle, err := h.bundler.BundleFromPEMorDER([]byte(blob["certificate"]), []byte(blob["private_key"]), bf, "")

if err != nil {

log.Warning("bad PEM certifcate or private key")

log.Warning("bad PEM certificate or private key")

return err

}

@@ -58,7 +58,7 @@ func (h *Handler) Handle(w http.ResponseWriter, r *http.Request) (err error) {

}

case "certificate":

if cert, err = certinfo.ParseCertificatePEM([]byte(blob["certificate"])); err != nil {

log.Warningf("bad PEM certifcate: %v", err)

log.Warningf("bad PEM certificate: %v", err)

return err

}

case "serial", "authority_key_id":

@@ -328,7 +328,7 @@ func (ar *AuthRemote) Sign(req []byte) ([]byte, error) {

return ar.AuthSign(req, nil, ar.provider)

}

// nomalizeURL checks for http/https protocol, appends "http" as default protocol if not defiend in url

// normalizeURL checks for http/https protocol, appends "http" as default protocol if not defined in url

func normalizeURL(addr string) (*url.URL, error) {

addr = strings.TrimSpace(addr)

@@ -44,7 +44,7 @@ const (

// by the most platforms.

Ubiquitous BundleFlavor = "ubiquitous"

// Force means the bundler only verfiies the input as a valid bundle, not optimization is done.

// Force means the bundler only verifies the input as a valid bundle, not optimization is done.

Force BundleFlavor = "force"

)

@@ -470,7 +470,7 @@ func constructCertFileName(cert *x509.Certificate) string {

// intermediate pool, the certificate is saved to file and added to

// the list of intermediates to be used for verification. This will

// not add any new certificates to the root pool; if the ultimate

// issuer is not trusted, fetching the certicate here will not change

// issuer is not trusted, fetching the certificate here will not change

// that.

func (b *Bundler) fetchIntermediates(certs []*x509.Certificate) (err error) {

if IntermediateStash != "" {

@@ -774,7 +774,7 @@ func newBundlerFromPEM(t *testing.T, caBundlePEM, intBundlePEM []byte) (b *Bundl

}

// newCustomizedBundleCreator is a helper function that returns a new Bundler

// takes specified CA bundle, intermediate bundle, and any additional intermdiate certs to generate a bundler.

// takes specified CA bundle, intermediate bundle, and any additional intermediate certs to generate a bundler.

func newCustomizedBundlerFromFile(t *testing.T, caBundle, intBundle, adhocInters string) (b *Bundler) {

b, err := NewBundler(caBundle, intBundle)

if err != nil {

@@ -327,7 +327,7 @@ func (d *Accessor) UpdateOCSP(serial, aki, body string, expiry time.Time) error

// We didn't implement 'upsert' with SQL statement and we lost race condition

// prevention provided by underlying DBMS.

// Reasoning:

// 1. it's diffcult to support multiple DBMS backends in the same time, the

// 1. it's difficult to support multiple DBMS backends in the same time, the

// SQL syntax differs from one to another.

// 2. we don't need a strict simultaneous consistency between OCSP and certificate

// status. It's OK that a OCSP response still shows 'good' while the

@@ -124,7 +124,7 @@ func registerFlags(c *Config, f *flag.FlagSet) {

f.StringVar(&c.Password, "password", "0", "Password for accessing PKCS #12 data passed to bundler")

f.StringVar(&c.Usage, "usage", "", "usage of private key")

f.StringVar(&c.PGPPrivate, "pgp-private", "", "file to load a PGP Private key decryption")

f.StringVar(&c.PGPName, "pgp-name", "", "PGP public key name, can be a comma-sepearted key name list")

f.StringVar(&c.PGPName, "pgp-name", "", "PGP public key name, can be a comma-separated key name list")

f.StringVar(&c.Serial, "serial", "", "certificate serial number")

f.StringVar(&c.CNOverride, "cn", "", "certificate common name (CN)")

f.StringVar(&c.AKI, "aki", "", "certificate issuer (authority) key identifier")

@@ -81,7 +81,7 @@

'scan.tlshandshake.title': 'TLS Handshake',

'scan.tlshandshake.description': 'Scans for host\'s SSL and TLS versions and cipher suite negotiation.',

'scan.tlshandshake.CipherSuite.title': 'Cipher Suite Matrix',

'scan.tlshandshake.CipherSuite.body': 'Determines host\'s cipher suite accepted and prefered order.',

'scan.tlshandshake.CipherSuite.body': 'Determines host\'s cipher suite accepted and preferred order.',

'scan.tlssession.title': 'TLS Session',

'scan.tlssession.description': 'Scans host\'s implementation of TLS session resumption using session ticket and session IDs.',

'scan.tlssession.SessionResume.title': 'Session Resumption',