FiloSottile / Heartbleed

A checker (site and tool) for CVE-2014-0160
http://filippo.io/Heartbleed
MIT License
2.31k stars 465 forks source link

Check fails on sites that return HTTP 5xx codes #58

Open jhoblitt opened 10 years ago

jhoblitt commented 10 years ago

I tried testing a proxy server that terminates TLS/SSL but with all the backend HTTP servers down. With a regular user-agent when connecting with HTTPS you see an HTTP 502/gateway error page. When trying to test the proxy with the heartbleed checker, it handshakes TLS correctly with the proxy but returns this warning:

 Uh-oh, something went wrong: dial tcp x.x.x.x:443: i/o timeout