TLS-Attacker icon indicating copy to clipboard operation
TLS-Attacker copied to clipboard

TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is developed by the Ruhr University Bochum (http://nds.rub.de/), the Paderborn University (https://cs.uni-paderborn.de/syssec/),...

Results 34 TLS-Attacker issues
Sort by recently updated
recently updated
newest added

Bumps [protocol-toolkit-bom](https://github.com/tls-attacker/Protocol-Toolkit-BOM) from 1.2.2 to 2.1.6. Commits ab40e7e release: v2.1.6 03908db Merge pull request #39 from tls-attacker/bumpAttacker 296fc5c Set new TLS-Attacker version cd09f93 release: Prepare for next development iteration 696bf24...

dependencies

Hi all, I noticed that recent versions of TLS-Attacker (e.g., 3.8.1) do not seem to report (UDP) transport handler exceptions caused by 'Destination unreachable' ICMP packets. I was wondering if...

06:59:27 [main] ERROR: TlsClient - Encountered an uncaught Exception aborting. See debug for more info. javax.xml.bind.UnmarshalException - with linked exception: [org.xml.sax.SAXParseException; lineNumber: 38; columnNumber: 40; cvc-complex-type.2.4.a: Invalid content was found...

Hello! I ran into some difficulties when using a brainpool curve in a certificat during ECDSA. It seems that the X509Certificate class in https://github.com/tls-attacker/TLS-Attacker/blob/a5e9b78b01026b076152ca9aa2773406ed7a854b/TLS-Core/src/main/java/de/rub/nds/tlsattacker/core/util/CertificateUtils.java#L125 does not support the brainpool curves....

Hello, I intend to construct a worksflow trace in TLS-Attacker's Java code and send it to a server in order to establish a TLS handshake. However, I have two issues...

enhancement

I am looking for something like this CKE handshake message in one tcp packet CCS handshake message in one tcp packet FIN handshake message in one tcp packet

enhancement

this is my code, i try to use the firse message's message and records to replay the second one, but before execution, it is null.

Able to do TLS1.2 Session Resumption. unable to do TLS1.3 Session Resumption. **s_server log:** ``` opessl_server openssl s_server -key mykey.pem -cert mycert.pem -msg -tls1_3 Using default temp DH parameters ACCEPT...

question

Hello, I've just tried to connect to openssl with gost-engine from TLS-Client.jar. ``` java -jar TLS-Client.jar -connect localhost: 4433 -cipher TLS_GOSTR341112_256_WITH_28147_CNT_IMIT -version TLS12 ``` Openssl works in a docker from...

bug

`openssl s_server -key p256.key -cert p256.crt -msg -tls1_3 -Verify 1` **-Verify 1** enforces the connection to proceed only when client provides a certificate. Is there any option to replicate above...

enhancement