CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-08-03 22:29:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Compatibility check for ssl-poodle

Browse source
This commit is contained in:
dmiller 2014-10-23 15:16:45 +00:00
parent 29ce5da5a1
commit eeb5f41932
1 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/ssl-poodle.nse
View file

@ -313,9 +313,15 @@ local function check_fallback_scsv(host, port, protocol, ciphers)
t["ciphers"] = tcopy(ciphers)
t.ciphers[#t.ciphers+1] = "TLS_FALLBACK_SCSV"
local record = try_params(host, port, t)
local checked, record = pcall(try_params, host, port, t)
-- TODO: remove this check after the next release.
-- Users are using this script without the necessary tls.lua changes
if not checked then
stdnse.print_verbose(1, "You have an out-of-date version of tls.lua. Some checks were skipped.")
return nil
end
if record["type"] == "alert" and record["body"][1]["description"] == "inappropriate_fallback" then
if record and record["type"] == "alert" and record["body"][1]["description"] == "inappropriate_fallback" then
ctx_log(2, protocol, "TLS_FALLBACK_SCSV rejected properly.")
return true
end