{"action":"created","issue":{"url":"https://api.github.com/repos/drwetter/testssl.sh/issues/117","labels_url":"https://api.github.com/repos/drwetter/testssl.sh/issues/117/labels{/name}","comments_url":"https://api.github.com/repos/drwetter/testssl.sh/issues/117/comments","events_url":"https://api.github.com/repos/drwetter/testssl.sh/issues/117/events","html_url":"https://github.com/drwetter/testssl.sh/pull/117","id":84084621,"number":117,"title":"Update OpenSSL reqs - LOGJAM checks need 1.0.2+","user":{"login":"teward","id":327952,"avatar_url":"https://avatars.githubusercontent.com/u/327952?v=3","gravatar_id":"","url":"https://api.github.com/users/teward","html_url":"https://github.com/teward","followers_url":"https://api.github.com/users/teward/followers","following_url":"https://api.github.com/users/teward/following{/other_user}","gists_url":"https://api.github.com/users/teward/gists{/gist_id}","starred_url":"https://api.github.com/users/teward/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/teward/subscriptions","organizations_url":"https://api.github.com/users/teward/orgs","repos_url":"https://api.github.com/users/teward/repos","events_url":"https://api.github.com/users/teward/events{/privacy}","received_events_url":"https://api.github.com/users/teward/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-06-02T15:58:11Z","updated_at":"2015-06-02T17:20:51Z","closed_at":"2015-06-02T16:09:19Z","pull_request":{"url":"https://api.github.com/repos/drwetter/testssl.sh/pulls/117","html_url":"https://github.com/drwetter/testssl.sh/pull/117","diff_url":"https://github.com/drwetter/testssl.sh/pull/117.diff","patch_url":"https://github.com/drwetter/testssl.sh/pull/117.patch"},"body":"To effectively analyze the LOGJAM risks, and to display the bitstrength on the DH/ECDH negotiated ciphers, OpenSSL 1.0.2+ is needed.  With anything under 1.0.2 (and greater than 1.0.0), the bitstrengths are not displayed as OpenSSL is 'too old' (as referred to in the script itself when 1.0.2 is newer than what's available).\r\n\r\nI suggest that we keep a note that >= 1.0.2 is needed for LOGJAM checks to be truly effective (and to display bitstrengths)"},"comment":{"url":"https://api.github.com/repos/drwetter/testssl.sh/issues/comments/108022295","html_url":"https://github.com/drwetter/testssl.sh/pull/117#issuecomment-108022295","issue_url":"https://api.github.com/repos/drwetter/testssl.sh/issues/117","id":108022295,"user":{"login":"PeterMosmans","id":1465302,"avatar_url":"https://avatars.githubusercontent.com/u/1465302?v=3","gravatar_id":"","url":"https://api.github.com/users/PeterMosmans","html_url":"https://github.com/PeterMosmans","followers_url":"https://api.github.com/users/PeterMosmans/followers","following_url":"https://api.github.com/users/PeterMosmans/following{/other_user}","gists_url":"https://api.github.com/users/PeterMosmans/gists{/gist_id}","starred_url":"https://api.github.com/users/PeterMosmans/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PeterMosmans/subscriptions","organizations_url":"https://api.github.com/users/PeterMosmans/orgs","repos_url":"https://api.github.com/users/PeterMosmans/repos","events_url":"https://api.github.com/users/PeterMosmans/events{/privacy}","received_events_url":"https://api.github.com/users/PeterMosmans/received_events","type":"User","site_admin":false},"created_at":"2015-06-02T17:20:51Z","updated_at":"2015-06-02T17:20:51Z","body":"@teward, thanks for letting us (me) know that the provided OpenSSL binaries are actually being used. I'm toying with the idea of distributing/providing (1.0.2-chacha) OpenSSL binaries for other distributions...."}}