CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-10-10 23:39:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Upgrade lowest-offered proto version to TLSv1.0. See ssl-ccs-injection for example

Browse source
This commit is contained in:
dmiller 2018-09-14 20:13:53 +00:00
parent 8c8f0fbf7c
commit ceb4e2dd71
2 changed files with 14 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
nselib/tls.lua
View file

@ -1539,7 +1539,15 @@ function client_hello(t)
table.insert(h, pack(">s3", b))
-- Record layer version should be SSLv3 (lowest compatible record version)
return record_write("handshake", t.record_protocol or "SSLv3", table.concat(h))
-- But some implementations (OpenSSL) will not finish a handshake that could
-- be downgraded by a MITM to SSLv3. So we use TLSv1.0 unless the caller
-- explicitly tries to set SSLv3.0 somewhere (t.record_protocol or
-- t.protocol)
local record_proto = t.record_protocol
if not record_proto then
record_proto = (t.protocol == "SSLv3") and "SSLv3" or "TLSv1.0"
end
return record_write("handshake", record_proto, table.concat(h))
end
local function read_atleast(s, n)