Wrong TLS scan results - Githubissues

ssllabs / ssllabs-scan

A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.

https://www.ssllabs.com/projects/ssllabs-apis/

Apache License 2.0

1.69k stars 240 forks source link

Wrong TLS scan results #821

Open ddsit-ddasilva opened 3 years ago

ddsit-ddasilva commented 3 years ago

The SSL test reports TLS 1.0 and TLS1.1 is open, however, using other tests confirm the aforementioned TLS protocols disabled. I have some older TLS1.0 and TLS1.1 ciphers but that shouldn't flag TLS1.0 and TLS1.0 protocols as open right?

naumanshah03 commented 3 years ago

Hi @ddsit-ddasilva,

The only possibility of SSLLabs reporting it as supported would be that your server must be supporting TLS 1.0 and TLS 1.1 with NoSNI. Alongside the Yes there would be a '*' (asterisk) to confirm the NoSNI support. You can also refer to this answer

If the above condition does not satisfy then please share the result or the domain name for us to assess the issue. If you do not wish to share the domain name in public then please ping me here

Regards, Nauman Shah