Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

scanner doesn't actually support x448 #939

Open
catharsis71 opened this issue Sep 9, 2023 · 1 comment
Open

scanner doesn't actually support x448 #939

catharsis71 opened this issue Sep 9, 2023 · 1 comment

Comments

@catharsis71
Copy link

  1. Configure Apache with SSLOpenSSLConfCmd Curves X448 and no others

  2. Verify with curl -I --curve x448 etc that server is accessible using X448 and nothing else

  3. Run SSL scan

  4. The scan will report "Failed to communicate with the secure server" because the scanner apparently doesn't actually support X448

even though browser support for X448 is lacking, OpenSSL 1.1.1 definitely supports it

if I switch Apache over to SSLOpenSSLConfCmd Curves X448:ffdhe8192 as a test so I can get a better look at the scan results, I can see that if falsely claims connection failure for OpenSSL

image

@naumanshah03
Copy link
Member

Hi @catharsis71

Could you please share the domain name to investigate the issue?

Regards,
Nauman Shah

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants