TLS scan the SUT multiple times with different cipiher suites and version

[akarmegam]

Created a json file config/nist-sp-800-52.json to keep NIST recommended and non recommended ciphersuites. And updated tlsscan to parse it using jq and invoke openssl s_client multiple times to scan each service.

And finally tlsscan generates report file tls_conn_report.json. From this a summar.csv is generated with list of tls versions supported and ciphersuites count and it is displayed in table form on console using tabled.

[nyrahul]

Many thanks for the PR @raja-ashok
It would be great to have separate plugins to handle NIST on top of TLS scan report. This would make it extensible. The plugins should enrich the base TLS scan report with their own findings.

[nyrahul]

Hey @raja-ashok , this looks great! Can you attach a sample report that is generated as part of this? Thanks

[akarmegam]

Started two openssl s_server process and ran the tlsscan for testing.

openssl s_server -port 4455 
openssl s_server -port 4466 -tls1_2
./src/tlsscan --infile data/addr.list