Nmap Development mailing list archives

ssl-enum-ciphers with just hostname fails


From: Kent Fritz <kfritz () wolfman devio us>
Date: Fri, 24 Oct 2014 17:04:53 -0400

I was scanning some servers on my network, and found that ssl-enum-ciphers
seems to skip TLSv1 and above if you just use the hostname rather than
the FQDN or IP address.  The first TLS record from the server is a warning
about the name, and it appears the code tries to  handle it, but it just
doesn't work.

I have -d output and a pcap I can send off-list if anyone wants to look.

Thanks,

Kent.

_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: