search

ssllabs / ssllabs-scan

A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
https://www.ssllabs.com/projects/ssllabs-apis/
Apache License 2.0
1.71k stars 243 forks source link

Scanner refuses to scan IPV6-only sites #893

Open catharsis71 opened 2 years ago

catharsis71 commented 2 years ago

When both IPV4 and IPV6 DNS records exist for a name, the scanner does a good job of scanning them all, so IPV6 support seems solid, however, when only IPV6 DNS records exist it refuses to scan the site at all

you can use ipv6.google.com as an example

image

Whether or not "IPV6" is in the name is irrelevant; loopsofzen.uk is another example site, it doesn't have "IPV6" in the name but only resolves to IPV6 IPs, and the scanner will not scan it.

hbehrendt commented 2 years ago

I can acknowledge this issue, since my site has only an IPV6 dns record it was rejected with no ip or not valid IP. At the point i added a ipV4 a record it was scanned on both protocols. It seems to brake the pre scanning at ipv4 and not looking for ipv6 any more.

naumanshah03 commented 2 years ago

This issue will be resolved in 2.1.11

It is available on dev.ssllabs.com and soon it will be available on www.ssllabs.com

Regards, Nauman Shah

catharsis71 commented 2 years ago

It is available on dev.ssllabs.com and soon it will be available on www.ssllabs.com

dev.ssllabs.com seems to be down & the main site still has this issue. any updates?

Gunni commented 1 year ago

FYI This is still broken on main website.

huaracheguarache commented 1 year ago

I just tried to scan my own IPv6-only website and the same thing happens: the scanner refuses to scan it.

thomasschaeferm commented 1 year ago

https://dev.ssllabs.com/ works for me.