stalkr/misc

Little bit of this, little bit of that

misc's Issues

Make http_pins.py Python3 friendly

Would be nice if you could port crypto/http_pins.py to Python3. Unfortunately I don't have an experience to fix non-trivial issues:

# python3 http_pins.py server.pem
server.pem:
Traceback (most recent call last):
  File "http_pins.py", line 97, in <module>
    main(sys.argv)
  File "http_pins.py", line 85, in main
    spki = extract_spki(cert)
  File "http_pins.py", line 30, in extract_spki
    out = proc.communicate()[0].strip().split('\n')
TypeError: a bytes-like object is required, not 'str'

PKP pins should be quoted

crypto/http_pins.py doesn't surround pins by double quotes whereas it should

One should always advertise at least two PKP pins

crypto/http_pins.py should generate at least two pins no matter what... even if the second one is based on invalid data; otherwise implementations following the RFC will disregard the pins.

Additionally, the second pin has to be non-related to the current trust chain (ie: you can't pin the end-certificate and the intermediary CA as both are used in the current trust chain)

chrome://net-internals#hsts is a good way of seeing what's working and what's not

LICENSE file missing

Hi,

Any chance of you making this client + server MIT licensed? Or perhaps BOOST licensed?

Thanks.