sslscan icon indicating copy to clipboard operation
sslscan copied to clipboard

Published 20 hours ago • verified publisher icon rbsec

RFC: Experimental support for servers which require a client certificate

Open MarcT512 opened this issue 5 years ago • 0 comments

RFC: Experimental support for servers which require a client certificate (Fixes rbsec#119). Fix: Typo s/response/respond in "Some servers will fail to response to SSLv3 ciphers over STARTTLS" Fix: Logic error prevents show trusted CAs running with checkCertificate == true.

RFC patch to enable scanning of servers which require a client certificate. How: Allow tests to continue in the event the SSL_connect() fails with certain "acceptable" errors . These are:

SSL alert 40 (Handshake failure) SSL alert 46 (Certificate Unknown) SSL alert 42 (Bad Certificate)

Testing is encouraged. Unfortunately I cannot provide any public test cases.

MarcT512 avatar Jul 10 '19 22:07 MarcT512