tls-attacker / TLS-Scanner

The TLS-Scanner Module from TLS-Attacker
Other
264 stars 39 forks source link

ALPACA StrictSNI test issue #95

Closed gj1803 closed 1 month ago

gj1803 commented 1 year ago

When testing the ALPACA probe I see that the SNI name is set to "notarealtls-attackerhost.com" in the isSupportingStrictSni method, however on my server trace the SNI value is still set to the default (localhost). This causes the SNI mitigation test to fail for the server even though I have implemented strict SNI logic, it seems he SNI value is not being set correctly in the TLSScanner client.

NErinola commented 1 month ago

Fixed with the release of v6.1.0.