Updated API doc for Drown and CVE-2016-2107

1 files changed, 25 insertions, 1 deletions

diff --git a/ssllabs-api-docs.md b/ssllabs-api-docs.md
index 1d6fd73..768be8d 100644
--- a/ssllabs-api-docs.md
+++ b/ssllabs-api-docs.md
@@ -244,6 +244,11 @@ The remainder of the document explains the structure of the returned objects. Th
    * 1 - not vulnerable
    * 2 - possibly vulnerable, but not exploitable
    * 3 - vulnerable and exploitable
+* **openSSLLuckyMinus20** - results of the CVE-2016-2107 test:
+   * -1 - test failed
+   * 0 - unknown
+   * 1 - not vulnerable
+   * 2 - vulnerable and insecure
 * **poodle** - true if the endpoint is vulnerable to POODLE; false otherwise
 * **poodleTls** - results of the POODLE TLS test:
    * -3 - timeout
@@ -270,6 +275,9 @@ The remainder of the document explains the structure of the returned objects. Th
 * **hstsPreloads[]** - information about preloaded HSTS policies.
 * **hpkpPolicy** - server's HPKP policy. Experimental.
 * **hpkpRoPolicy** - server's HPKP RO (Report Only) policy. Experimental. 
+* **drownHosts[]** - list of [drown hosts](#drownhosts). Experimental.
+* **drownErrors** - true if error occurred in drown test.
+* **drownVulnerable** - true if server vulnerable to drown attack.
 
 ### Info ###
 
@@ -462,7 +470,23 @@ The HstsPreload object contains preload HSTS status of one source for the curren
 * **matchedPins[]** -  list of pins that match the current configuration
 * **directives[][]** - list of raw policy directives
 
-
+### DrownHosts ###
+
+* **ip** - Ip address of server that shares same RSA-Key/hostname in its certificate
+* **export** - true if export cipher suites detected
+* **port** - port number of the server
+* **special** - true if vulnerable OpenSSL version detected
+* **sslv2** - true if SSL v2 is supported
+* **status** - drown host status:
+   * error - error occurred in test
+   * unknown - before the status is checked
+   * not_checked - not checked if already vulnerable server found
+   * not_checked_same_host - Not checked (same host)
+   * handshake_failure - when SSL v2 not supported by server
+   * sslv2 - SSL v2 supported but not same rsa key
+   * key_match - vulnerable (same key with SSL v2)
+   * hostname_match - vulnerable (same hostname with SSL v2)
+   
 ### StatusCodes ###
 
 * **statusDetails** - a map containing all status details codes and the corresponding English translations. Please note that, once in use, the codes will not change, whereas the translations may change at any time.