winshock-test
winshock-test copied to clipboard
Not working with patched box
I have a machine that is patched and rebooted, but the test says it isn't.
I removed the 2>&1 on the openssl command and got the following:
Testing host:443 for availability of SSL ciphers added in MS14-066... Testing cipher DHE-RSA-AES256-GCM-SHA384: write:errno=104 FAIL Testing cipher DHE-RSA-AES128-GCM-SHA256: write:errno=104 FAIL Testing cipher AES256-GCM-SHA384: write:errno=104 FAIL Testing cipher AES128-GCM-SHA256: write:errno=104 FAIL Testing if IIS is running on port 443: YES System at host:443 seems to be patched: NO
It is possible that your OpenSSL version does not support those ciphers. Could you please update to the latest version of this script that I just pushed and report back with some results?