Open kylak opened 1 month ago
How to interpret it ?
Good question ;-)
As you see in the warning (last line in you example), 0xC013
from the range 0x030AC013 ... 0x030AC032
caused the message. This is a unknown cipher, hence we don't know what the server is doing with it. In this case it return some error in the server-hello.
Finally these ciphers are not listed as accepted, do they? That's intended behaviour, IMHO.
If you're really interested what's going on with undefined ciphers, you may use the options --trace=4
and/or any of the --ssl-*
options. See ./o-saft.pl --help=options
.
If this in't sufficient, feel free to dig deeper into the sources of SSLhello.pm.
Ok I got it thanks. And what's about the execution time please ?
.. the execution is not yet finished after nearly 1 hour, is it normal?
Yes if so many warnings occur.
--range=full
is fuzzing, or in this case brute force 1.6G ciphers. Which time do you expect?
Reason is that we try to tweak the server with other client-hello messages if such errors are detected. This behaviour can be controlled slightly with the --ssl-*
options.
For what it's worth: on my server (cpu 3GHz, 3GB free RAM) localhost, this test completes in less than 5 minutes (but no warnings there), not bad, is it? I'd like to engage you to think about what you're doing, checking the docs, and then ask if something is wrong, missing, unexpected. Also the options --v --trace --trace=[234] --traceme may give hints what's going on. Wait: we can setup a training ... :-)
Could you explain what you mean by "tweak" in "we try to tweak the server with other client-hello messages" ?
Thanks.
Short answer: fiddling around with various client-hello messages.
Feel free to follow my comment (last paragraph).
Additionally the --trace=4 and --trace=5 option will flood you with information.
You may also try usr/checkAllCiphers.pl --trace=5 your-server
Ok, thanks.
Hi.
I executed the
./o-saft.pl my.tld +cipher --ciphermode=intern --cipher-range=full
command on a local server, but the execution is not yet finished after nearly 1 hour, is it normal ? if yes, how long it takes usually on a local server please ?Also, here is the result given by the command :
Is this result normal ? How to interpret it ? because I didn't find any documentation on this.
Regards.