Брюссель

Бельгия

Проект ведется на английском, знание английского на уровне достаточном для беглого чтения документации и переписки -- необходимое условие.

The goal of this project is to develop a tool for off-line MITM testing of any SSL/TLS clients (not necessary HTTPS),
suitable for professional use. The latter basically means decent evidence gathering and reporting functionality. Our
objective is to make security audits of SSL clients (thick clients, mobile devices, appliances, etc) easier.
The project is open-source, https://github.com/grwl/sslcaudit . At present I have a first version of the software ready
for release. As I am not a professional Python programmer, I would like to have someone good in Python OO
programming on board to help me clean up and polish off the tool.

See https://github.com/grwl/sslcaudit/blob/master/README for more details.

Right now I have the following tasks:
* to review the code and make proposals for refactoring where necessary
* to work on new features and bugs, software packaging
- package the tool for distribution to other platforms (esp. Ubuntu and Debian-based) platforms
- prettify error reporting, logging
- capture network traffic handled by sslcaudit (in the background thread) and write into pcap file
- fix network connectivity code to properly support domain name resolution and handle IPv6 addresses in command-line parameters
- for each invocation of a tool create a separate directory and keep all certificate files, logs and output reports there

There also a need to develop additional features.

Mandatory skills:
* Excellent Python OO software development skills, ability to write clean code
* General OO software refactoring skills
* Self-discipline to write adequate amount of unit test, use version control (GIT) and bug tracking
* Understanding of SSL/TLS protocol suite, at least to the level to clearly understand the purpose of the tool
* Good communication and code documentation skills

Nice to have:
* Experience with M2Crypto library
* Experience with packaging Python software for redistribution
* Shell scripting skills

Проект ведется на английском, знание английского на уровне достаточном для беглого чтения документации и переписки -- необходимое условие.

The goal of this project is to develop a tool for off-line MITM testing of any SSL/TLS clients (not necessary HTTPS),
suitable for professional use. The latter basically means decent evidence gathering and reporting functionality. Our
objective is to make security audits of SSL clients (thick clients, mobile devices, appliances, etc) easier.
The project is open-source, <a href="https://github.com/grwl/sslcaudit" rel="nofollow noopener noreferrer" target="_blank">https://github.com/grwl/sslcaudit</a> . At present I have a first version of the software ready
for release. As I am not a professional Python programmer, I would like to have someone good in Python OO
programming on board to help me clean up and polish off the tool.

See <a href="https://github.com/grwl/sslcaudit/blob/master/README" rel="nofollow noopener noreferrer" target="_blank">https://github.com/grwl/sslcaudit/blob/master/README</a> for more details.

Right now I have the following tasks:
* to review the code and make proposals for refactoring where necessary
* to work on new features and bugs, software packaging
- package the tool for distribution to other platforms (esp. Ubuntu and Debian-based) platforms
- prettify error reporting, logging
- capture network traffic handled by sslcaudit (in the background thread) and write into pcap file
- fix network connectivity code to properly support domain name resolution and handle IPv6 addresses in command-line parameters
- for each invocation of a tool create a separate directory and keep all certificate files, logs and output reports there

There also a need to develop additional features.

Mandatory skills:
* Excellent Python OO software development skills, ability to write clean code
* General OO software refactoring skills
* Self-discipline to write adequate amount of unit test, use version control (GIT) and bug tracking
* Understanding of SSL/TLS protocol suite, at least to the level to clearly understand the purpose of the tool
* Good communication and code documentation skills

Nice to have:
* Experience with M2Crypto library
* Experience with packaging Python software for redistribution
* Shell scripting skills

Александр Безручко gremwell_be

Доработка программы проверки SSL клиентов (Python)