sslscan icon indicating copy to clipboard operation
sslscan copied to clipboard

sslscan tests SSL/TLS enabled services to discover supported cipher suites

Results 50 sslscan issues
Sort by recently updated
recently updated
newest added

## Summary _sslscan_ may return a False Positive `'Server accepts all signature algorithms'` for TLS1.3. ## Example Signature Algorithm = `RSA+SHA256 (rsa_pkcs1_sha256)` Not supported by `aws.amazon.com`. ``` openssl s_client -connect...

The releases of this tool have a GPG detached signature in the archive, which implies the feature of GPG verification -- so I intended to verify it. I commend you...

When `2.0.16` is compiled with GCC 13 there are such warnings: ``` cc -o sslscan -Wall -Wformat=2 -Wformat-security -Wno-deprecated-declarations -pie -z relro -z now -L/usr/local/lib -L/usr/local/ssl/lib -L/usr/local/opt/opens sl/lib -L/opt/local/lib -pipe...

When connecting to some services i receive following message: Connected to x.x.x.x Testing SSL server x.x.x.x on port 443 using SNI name x.x.x.x SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0...

This will build x86, x86_64, armv7 and aarch64 images and push them into the github container registry. I've also tidied the outstanding hadolint warnings.

OpenSSL version does not support compression Rebuild with zlib1g-dev package for zlib support

Releasing `2.1.5` second time is a bit strange. Previous release tag: ``` commit a1b02920dba99455c529aec952619e2f0e362b58 (tag: 2.1.5, origin/master, origin/HEAD) Merge: 21a9ce4 eb04800 Author: rbsec AuthorDate: 2024-07-02 21:27:26 +0100 Commit: GitHub CommitDate:...

I'm setting up a service with post-quantum algorithms and I'd like to be able to detect correct setup with sslscan. Would you accept a contribution that allows printing post-quantum algorithms?...