CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-09-02 08:20:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Tolerate TLS peers that do not send close_notify

Browse source
This commit is contained in:
nnposter 2026-08-09 22:03:18 +00:00
parent 59a355c5f7
commit 115af39aac
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
CHANGELOG
View file

@ -1,5 +1,8 @@
#Nmap Changelog ($Id$); -*-text-*-
o [NSE][GH#3430] Nmap now tolerates TLS targets that do not send close_notify.
[nnposter]
Nmap 7.991 [2026-08-06]
o Fixed a memory-consumption hang in Ncat's HTTP proxy code that affected both

3
nsock/src/nsock_ssl.c
View file

@ -208,6 +208,9 @@ static nsock_ssl_ctx nsock_pool_ssl_init_helper(SSL_CTX *ctx, int flags) {
SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2);
if (flags & NSOCK_SSL_MAX_SPEED) {
SSL_CTX_set_options(ctx, SSL_OP_ALL);
#ifdef SSL_OP_IGNORE_UNEXPECTED_EOF
SSL_CTX_set_options(ctx, SSL_OP_IGNORE_UNEXPECTED_EOF);
#endif
if (!SSL_CTX_set_cipher_list(ctx, CIPHERS_FAST))
fatal("Unable to set OpenSSL cipher list: %s",