X25519-only KEX fails - Githubissues

hardenize / hardenize-public

11 stars 0 forks source link

X25519-only KEX fails #9

Open Darkspirit opened 7 years ago

Darkspirit commented 7 years ago

https://www.hardenize.com/report/dev2.terrax.net/1508683367#www_tls https://www.ssllabs.com/ssltest/analyze.html?d=dev2.terrax.net&hideResults=on

ivanr commented 7 years ago

Unsurprisinly, if you start to use only a brand-new primitive, things start breaking :) As you've correctly assumed in the reference commit, Java doesn't currently support X25519. In Hardenize (at the moment), if we can't get a full HTTPS connection, we don't test TLS. I think I could change this to do test TLS and show a message for HTTPS to explain what's happening.