jvehent/cipherscan — pull request #25 by tomato42 (2014-10-04 12:56:54+00:00)
Title: certificate collection + few extras

This patch set fixes the few issues with the pull #18 as well as adds new features:
* fix for counting ECDH-RSA cipher as RSA
* few fixes to the human readable output (missing headers, sorting)
* make human readable output smaller when server supports cipher with all protocols (SSLv3-TLSv1.2)
* report statistics about compatibility of servers with Firefox 29 (and other clients with same cipher ordering) cipher selection
* fix for the incorrect options for SSLv2 scan
* detecting server vs client cipher ordering
* using CApath instead CAfile (speedup)
* collection of intermediate and end entity certificates
* performance improvements to the scanner (skip protocols detected as unsupported, limit forking)
* collection of statistics about certificate chains used by servers (length, key sizes, names of intermediates and root CAs, etc.)
* counting Insecure servers (ones that use anonymous DH or insecure ciphers like DES, RC2, export grade), moving SEED and IDEA to their own category (they are iffy, not outright broken, like RC4)