SNI issue with 'o-saft.pl +cipherall' if SSLv2 or SSLv3

OWASP / O-Saft

O-Saft - OWASP SSL advanced forensic tool

GNU General Public License v2.0

372 stars 97 forks source link

SNI issue with 'o-saft.pl +cipherall' if SSLv2 or SSLv3 #106

Closed sslHello closed 6 years ago

sslHello commented 6 years ago

SNI with 'o-saft.pl +cipherall' does not work correctly for TLSv1 and higher if SSLv2 or SSLv3 is enabled. 'o-saft.pl +cipherall --nosslv3 --nosslv2' works.

sslHello commented 6 years ago

Fixed with commits f7aa6be841ec01c0c6fb2fc4400ddc4d3a0ca168 and 82951d70410ddb54db3f7412f73041838ef4b2a2