tls-map 3.0.0 → 3.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4026709ea82fcd9b7d1aff224b5bbef53c1528b4f459cdd979e34efa288696ad
-  data.tar.gz: 3023589dd5993e4cb3ba5425794485970b5a9f643bd9ad83519680a9c4b8bad2
+  metadata.gz: c3bfd94194d2ff746b82e4f08e02efa5a223dc7b1cf235efe6a1537803c76761
+  data.tar.gz: c7fb814d57ceb1d1d072d4821f382d615e271223687cc51978b0644e6a092418
 SHA512:
-  metadata.gz: 94823f19862439cdda3882f7ee931bdaa5233f5888a95f6c03b42113c1dc7a6c79571277257556723055e3538328aad6bac0fd782bbcf45720dd0133c8100020
-  data.tar.gz: 5188a63cf57c6424294ffb408e9db7f49e2a199753ef69b6ec9786c5e4e02ee3c6aa16be2346a89067770f601bce09fed4d034b14b618fb74a7bbb17cd289a7b
+  metadata.gz: 362bc13419886123f2877836b60f0f9f859d84a8bc54a1ec99cb0befddbd3eb3e5cfe09cbf2c4c2a0dd76ba860461985ada8bb710f0b8271593e28fa1ffb9e9f
+  data.tar.gz: 549250c7ad98e4ff866bea895a161c58d4827e5ae9a388ce61fb44e3a41bbf56f790d261507e8b39cab65003dbc4f7a64af1f823ee00fed96a41047eeb586f46

data/bin/tls-map

@@ -12,43 +12,44 @@ require 'paint'
 # can't specify 2 options with the same name even if used in different commands
 # https://github.com/docopt/docopt/issues/296#issuecomment-857477191
 doc = <<~DOCOPT
-  TLS map #{TLSmap::VERSION}
+  #{Paint['TLS map', :bold, '#81c8b6']} #{Paint[TLSmap::VERSION, :bold]}
 
-  Usage:
+  #{Paint['Usage:', '#81c8b6']}
     tls-map search <criteria> <term> [-o <output> --force -e -a] [--no-color --debug]
-    tls-map bulk <criteria> <file> [-q <output> --force] [--no-color --debug]
+    tls-map bulk <criteria> <file> [(-q <output> | --audit) --force] [--no-color --debug]
     tls-map export <filename> <format> [--force] [--debug]
     tls-map extract <filename> <format> [--no-color --debug [--only-weak | --hide-weak]]
     tls-map update [--with-extended] [--debug]
     tls-map -h | --help
     tls-map --version
 
-  Search options: (offline) search and translate cipher names between SSL/TLS libraries
+  #{Paint['Search options:', '#81c8b6']} #{Paint['(offline) search and translate cipher names between SSL/TLS libraries', :underline]}
     <criteria>              The type of term. Accepted values: codepoint, iana, openssl, gnutls, nss.
     <term>                  The cipher algorithm name.
     -o, --output <output>   Displayed fields. Accepted values: all, codepoint, iana, openssl, gnutls, nss. [default: all]
     -e, --extended          (Online) Display additional information about the cipher (requires output = all or iana)
     -a, --acronym           (Online) Display full acronym name (requires -e / --extended option)
 
-  Bulk options: (offline) search and translate cipher names between SSL/TLS libraries in bulk
+  #{Paint['Bulk options:', '#81c8b6']} #{Paint['(offline) search and translate cipher names between SSL/TLS libraries in bulk', :underline]}
     <criteria>              The type of term. Accepted values: codepoint, iana, openssl, gnutls, nss.
     <file>                  File containing the cipher algorithm names, one per line.
     -q, --output2 <output>  Displayed fields. Accepted values: codepoint, iana, openssl, gnutls, nss. [default: iana]
+    --audit                 Highlight weak (security level equal to weak or insecure) cipher suites. (work only with TLS not SSL).
 
-  Export options: (offline) export the list of all ciphers (mapping) in various formats
+  #{Paint['Export options:', '#81c8b6']} #{Paint['(offline) export the list of all ciphers (mapping) in various formats', :underline]}
     <filename>              The output file name to write to.
     <format>                Supported formats: markdown (a markdown table), json_pretty (expanded JSON), json_compact (minified JSON), marshal (Ruby marshalized hash).
 
-  Extract options: (offline) extract ciphers from external tools output file
+  #{Paint['Extract options:', '#81c8b6']} #{Paint['(offline) extract ciphers from external tools output file', :underline]}
     <filename>              The external tool output file
     <format>                Supported formats: sslyze, sslscan2, testssl, ssllabs-scan, tlsx (check the documentation for the expected file format)
     --only-weak             Show only ciphers with a security level equal to weak or insecure (hide secure and recommended) (work only with TLS not SSL).
     --hide-weak             Hide ciphers with a security level equal to weak or insecure (show only secure and recommended) (work only with TLS not SSL).
 
-  Update options: (online) DANGEROUS, will break database integrity, force option will be required
+  #{Paint['Update options:', '#81c8b6']} #{Paint['(online) DANGEROUS, will break database integrity, force option will be required', :underline]}
     --with-extended         (Online) Also save extended information used by search --extended option.
 
-  Other options:
+  #{Paint['Other options:', '#81c8b6']}
     --force     Force parsing even if integrity check failed (DANGEROUS, may result in command execution vulnerability)
     --no-color  Disable colorized output
     --debug     Display arguments
@@ -88,7 +89,7 @@ begin
           puts "#{Paint[dic[k], :magenta]}: #{Paint[v, sec_lvl[v][:color]]}"
         else
           print "#{Paint[dic[k], :magenta]}: #{Paint[v, :white]}"
-          print " (#{tmext_i.translate_acronym(v)})" if args['--acronym'] && !tmext_i.translate_acronym(v).nil? # rubocop:disable Metrics/BlockNesting
+          print " (#{tmext_i.translate_acronym(v)})" if args['--acronym'] && !tmext_i.translate_acronym(v).nil?
           puts
         end
       end
@@ -98,7 +99,23 @@ begin
     res = cli.bulk_search(args['<criteria>'].to_sym, args['<file>'], args['--output2'].to_sym)
     puts Paint['No match found', :red] if res.empty?
     res.each do |h|
-      puts Paint[h[args['--output2'].to_sym], :green]
+      cs = h[args['--output2'].to_sym] # cipher suite
+      next if cs.nil?
+
+      if args['--audit']
+        cliext = TLSmap::CLI::Extended.new
+        ci = TLSmap::App::Cipher.new(:iana, cs, enhanced_data: cliext.enhanced_data)
+        if ci.should_i_use?
+          print Paint[cs, :green]
+        else
+          print Paint[cs, :red]
+          print ' -- '
+          print Paint['weak', :red, :bold]
+        end
+        puts
+      else
+        puts Paint[cs, :green]
+      end
     end
   elsif args['export']
     cli = TLSmap::CLI.new(args['--force'])
@@ -112,8 +129,11 @@ begin
         cliext = TLSmap::CLI::Extended.new
         v.each do |alg|
           ci = TLSmap::App::Cipher.new(:iana, alg, enhanced_data: cliext.enhanced_data)
-          puts Paint[alg, :white] if (args['--only-weak'] && !ci.should_i_use?) ||
-                                     (args['--hide-weak'] && ci.should_i_use?)
+          next unless (args['--only-weak'] && !ci.should_i_use?) ||
+                      (args['--hide-weak'] && ci.should_i_use?)
+
+          print Paint["#{k} ", :blue] unless v.empty?
+          puts Paint[alg, :white]
         end
       else
         puts Paint[k, :blue] unless v.empty?

data/lib/tls_map/cli/cli.rb

@@ -56,7 +56,7 @@ module TLSmap
 
     # Offline version of {App::Extended}
     class Extended < App::Extended
-      INTEGRITY = 'bed565db6cc8da400c51bcc17107b68bce86f2c7bdf2495d43633679a295d0aa' # sha2-256
+      INTEGRITY = '3236733f1d5b69f4230adaa726faeb2f4ba4e88aa59a72880cc822c43ed37b73' # sha2-256
 
       # Load and parse data from marshalized hash (`data/extended.marshal`).
       # It must match the integrity check for security purpose.

data/lib/tls_map/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module TLSmap
-  VERSION = '3.0.0'
+  VERSION = '3.1.0'
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: tls-map
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 3.1.0
 platform: ruby
 authors:
 - Alexandre ZANNI
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-06-23 00:00:00.000000000 Z
+date: 2025-02-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: csv
@@ -108,7 +107,6 @@ metadata:
   source_code_uri: https://github.com/noraj/tls-map/
   funding_uri: https://github.com/sponsors/noraj
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -116,7 +114,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.0.0
+      version: 3.1.0
   - - "<"
     - !ruby/object:Gem::Version
       version: '4.0'
@@ -126,8 +124,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.3
-signing_key:
+rubygems_version: 3.6.2
 specification_version: 4
 summary: CLI & library for TLS cipher suites manipulation
 test_files: []