diff --git a/.gitignore b/.gitignore index 5ab49304..6c55b407 100644 --- a/.gitignore +++ b/.gitignore @@ -1,7 +1,7 @@ # Custom rules .DS_Store -*.css.map .vscode/ +custom.css migrations/ media/ diff --git a/directory/fixtures/00_vulnerabilities.yaml b/directory/fixtures/00_vulnerabilities.yaml index 72e24d91..19e78cad 100644 --- a/directory/fixtures/00_vulnerabilities.yaml +++ b/directory/fixtures/00_vulnerabilities.yaml @@ -83,3 +83,8 @@ fields: severity: 2 description: 'The GOST algorithms are Russian cryptographic standard algorithms. Their security is not proven and its use is not recommended by the IETF. (see ietf.org)' +- model: directory.Vulnerability + pk: 'Raccoon Attack' + fields: + severity: 0 + description: 'The so-called Raccoon Attack affects the specifications of TLS 1.2 and below when using a DH(E) key exchange. According to the researchers, while very hard to exploit, in rare circumstances this timing attack allows attackers to decrypt the connection between users and the server. A fix has been introduced in the TLS 1.3 specification.' diff --git a/directory/fixtures/01_technologies.yaml b/directory/fixtures/01_technologies.yaml index f964c109..1658334a 100644 --- a/directory/fixtures/01_technologies.yaml +++ b/directory/fixtures/01_technologies.yaml @@ -96,12 +96,12 @@ pk: 'DH' fields: long_name: 'Diffie-Hellman' - vulnerabilities: ['Non-ephemeral Key Exchange'] + vulnerabilities: ['Non-ephemeral Key Exchange', 'Raccoon Attack'] - model: directory.KexAlgorithm pk: 'DHE' fields: long_name: 'Diffie-Hellman Ephemeral' - vulnerabilities: [] + vulnerabilities: ['Raccoon Attack'] - model: directory.KexAlgorithm pk: 'ECDH' fields: diff --git a/directory/helpers.py b/directory/helpers.py index 10412b27..5dd72659 100644 --- a/directory/helpers.py +++ b/directory/helpers.py @@ -50,6 +50,9 @@ def filter_cs_tls(ciphersuites, tls_version): return ciphersuites.filter(tls_version__major=1, tls_version__minor=2) elif tls_version == 'tls13': return ciphersuites.filter(tls_version__major=1, tls_version__minor=3) + elif tls_version == 'xtls13': + return ciphersuites.filter(tls_version__major=1, tls_version__minor=3)\ + .exclude(tls_version__minor=2) else: return ciphersuites diff --git a/directory/templates/directory/detail_cs.html b/directory/templates/directory/detail_cs.html index e762b41e..0701db7b 100644 --- a/directory/templates/directory/detail_cs.html +++ b/directory/templates/directory/detail_cs.html @@ -5,12 +5,12 @@