search

OWASP / O-Saft

O-Saft - OWASP SSL advanced forensic tool
GNU General Public License v2.0
373 stars 86 forks source link

ALPN and NPN check #72

Closed EnDe closed 7 years ago

EnDe commented 7 years ago

Currently O-Saft checks for NPN only. The newer ALPN check is missing. It also have been observed, that some server do not follow the recomendation in the RFC for ALPN to select the first offered protocol by the client. This means, that a better check have to be implemented for both ALPN and NPN.

EnDe commented 7 years ago

partially fixed with Net::SSLinfo.pm and o-saft.pl

EnDe commented 7 years ago

implemented with +alpns and +npns in o-saft.pl