18 posts categorized "cnark"


CryptoNark 0.5.7 Released

Well, after an almost two year hiatus away from this blog, it's time for me to start posting stuff again. To kick things off, here is an update to cryptonark that fixes an issue with ssl certificate validation. You can grab it from the Downloads page and the changelog is available on the main CryptoNark page.

Thanks to Olivier Mengué for pointing this issue out.


CryptoNark 0.5.6 Released

Today, I am releasing CryptoNark version 0.5.6, which contains three notable changes/improvements:

  1. OpenSSL version detection has been updated up to the latest versions released on October 15, 2014.
  2. Due to the POODLE vulnerability, colorization of all SSL3 ciphers are now red regardless of cipher strength, which is an attempt to encourage people to start disabling sslv3 support on their ssl servers/websites.
  3. Added some preliminary SHA-2 certificate detection. If cnark sees that the SSL certificate on the site uses an SHA-2 signature algorithm, it will highlight that in green. If it doesn't see an SHA-2 certificate, it will display it in red.

The changelog for all released versions is on the CryptoNark info page and you can download it from my Downloads page.


CryptoNark 0.5.5 Released - Now Supporting Windows

It's only been a few days since the 0.5 release but I've been busy updating CryptoNark with some bug fixes and also added in support for Windows. One caveat: I've only tested this on WIndows 8.1 under a Strawberry Perl 5.18.2 installation. Please let me know if there are any issues on older/newer versions of Strawberry Perl.

One additional item to note in this version. SSLv2 connections to some sites were causing perl to crash when running on Windows. I've modified the subroutine that is making SSLv2 calls to make it more stable but on those sites that it was crashing on, cnark now falsely (?) reports that an sslv2 connection with an RC4-MD5 cipher is possible. I'm still investigating this issue. It does not happen on all sites.

You can download the new CryptoNark v0.5.5 release from the Downloads page and you can see the changelog at the CryptoNark page on this site.