mozilla / cipherscan

A very simple way to find out which SSL ciphersuites are supported by a target.
Mozilla Public License 2.0
1.97k stars 266 forks source link

Implement cipher support test in cscan #152

Open tomato42 opened 6 years ago

tomato42 commented 6 years ago

since adding a test for a cipher support in cscan/tlslite-ng is just a question of passing additional id to ClientHello constructor, extending it for new ciphers is fairly trivial

note: this is only about checking for ServerHello reply that indicates support for any given cipher, not about actually negotiating (and supporting) the cipher on cscan side

that does mean that for TLS 1.2 we won't be able to collect session ticket metadata or read EncryptedExtensions from TLS 1.3