Skip to content

Commit 561591d

Browse files
committed
Fixed cipher enumeration against servers that require unsafe legacy renegotiation.
1 parent fb1c252 commit 561591d

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

sslscan.c

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1869,6 +1869,9 @@ int testCipher(struct sslCheckOptions *options, const SSL_METHOD *sslMethod)
18691869
// This enables TLS SNI
18701870
SSL_set_tlsext_host_name (ssl, options->sniname);
18711871

1872+
// Against some servers, this is required for a successful SSL_connect(), below.
1873+
SSL_set_options(ssl, SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION);
1874+
18721875
// Connect SSL over socket
18731876
cipherStatus = SSL_connect(ssl);
18741877
printf_verbose("SSL_connect() returned: %d\n", cipherStatus);

0 commit comments

Comments
 (0)