Arachni does not support TLSv1.3

Arachni / arachni

Web Application Security Scanner Framework

http://www.arachni-scanner.com

Other

3.76k stars 761 forks source link

Arachni does not support TLSv1.3 #1066

Open pglavica opened 2 years ago

pglavica commented 2 years ago

Hi,

When I try to initiate scan against website deployed on server who initiates TLSv1.3 I recieve error: Couldn't get a response after 5 tries: SSL connect error

I use Arachni v1.6.1

When I reconfigure server-side to use TLSv1.2 scan works fine. From OS where Arachni is started, OS level supports TLSv1.3 (Ubuntu 20.04 LTS), curl to the requested site works just fine.

Zapotek commented 2 years ago

Hello,

Can we arrange access to the server privately so that I can run some tests?

tasos.laskos@gmail.com

Cheers