SSLyze on Raspbian

[nabla-c0d3]

SSLyze on Raspbian

[carstenhag]

Same issue on a ARMv7l server. There should be an ARM build/release 👍

Linux c1-10-1-4-39 3.17.0-119 #1 SMP Thu Nov 20 14:15:44 CET 2014 armv7l armv7l armv7l GNU/Linux

[nabla-c0d3]

Someone made a pull request for arm https://github.com/nabla-c0d3/nassl/pull/21/commits but maintaining compatibility with OS X, Linux and Windows is already pretty complex and time-consuming. I don't think I have time to add yet another platform.

[fabian-z]

It seems to me if you let aside cross-compilation, the needed parts are already there since this should be only an architectural flavor of linux. You'll just have to replace OPENSSL_TARGET with 'linux-armv4' in buildAll_unix.py.

Afterwards, copy the built files manually from nassl/build/lib.linux-arm[..]/* to nassl/test/ and run the tests manually by doing "python2.7 -m unittest discover --pattern=*_Tests.py" in the test directory.
If you copy the directory nassl/test/nassl to the root directory of sslyze afterwards, it should be working fine for ARM (tested on Raspberry Pi Model B armv6h & Cubietruck armv7l, both running Arch Linux ARM).

There may be a better way to do this, but it in my tests it worked fine. If needed, I can provide explanatory build instructions.

That being said, if you just want a working, current build of sslyze 0.11 for ARM, you may use mine (working on both armv6 & armv7):
https://cloud.nf-design.eu/d/009a0e61bb/

[nabla-c0d3]

I would definitely merge a pull request on nassl to add support for arm in buildAll_unix; it sounds like it only requires switching the OPENSSL_TARGET ?

[fabian-z]

Sorry for the late answer - I think it should be enough to switch OPENSSL_TARGET to "linux-armv4" when running on ARM. I don't know enough about pythons architecture() and sys/platform to suggest a value to check for here, though.
Additionally, as pointed out above, the built files will be in a different directory, which should be the case for every different architecture anyway if I grasp the code correctly.
This would make building on the target platform feasible - I think cross-compilation would introduce to much overhead to the sslyze build.

[nabla-c0d3]

Closing this here as it is purely an nassl issue, specifically its C extension. I would be willing to merge a pull request on the nassl repo for compiling on an ARM platform; the build script is a lot cleaner now and it should be easy to add it.

[jepunband]

It seems to me if you let aside cross-compilation, the needed parts are already there since this should be only an architectural flavor of linux. You'll just have to replace OPENSSL_TARGET with 'linux-armv4' in buildAll_unix.py.

Afterwards, copy the built files manually from nassl/build/lib.linux-arm[..]/* to nassl/test/ and run the tests manually by doing "python2.7 -m unittest discover --pattern=*_Tests.py" in the test directory.
If you copy the directory nassl/test/nassl to the root directory of sslyze afterwards, it should be working fine for ARM (tested on Raspberry Pi Model B armv6h & Cubietruck armv7l, both running Arch Linux ARM).

There may be a better way to do this, but it in my tests it worked fine. If needed, I can provide explanatory build instructions.

That being said, if you just want a working, current build of sslyze 0.11 for ARM, you may use mine (working on both armv6 & armv7):
https://cloud.nf-design.eu/d/009a0e61bb/

Hi where can i download sslyze for arm7.. i have tried all other options to install it nothing works... need support .. thanks.

[wilco375]

For those running into this issue trying to get sslyze working on Raspberry Pi, the following worked for me:

1. Manually build nassl (this takes a while):

git clone https://github.com/nabla-c0d3/nassl.git
cd nassl
pip install --upgrade pip setuptools wheel
pip install -r requirements-dev.txt
invoke build.all
cd ..

2. Clone sslyze and install dependencies

git clone https://github.com/nabla-c0d3/sslyze.git
cd sslyze
sed -i 's/"nassl/#"nassl/g' setup.py # Comment out nassl from pip dependencies
pip install -e . 
pip install -r requirements-dev.txt
cp -r ../nassl/nassl nassl

3. Use sslyze
   python3 -m sslyze [...]