Skip to content

sslv3 alert illegal parameter #555

@ChaosKnightz

Description

@ChaosKnightz

Describe the bug
When performing a scan against certain hosts where sslv3 is enabled, sslyze returns the following error "error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter\n"

To Reproduce
Steps to reproduce the behavior:
ran a default scan by just calling sslyze and the targeted ip and received the following result

Note the ip has been sanitized for legal concerns, the actual host was provided directly to the creator of sslyze.

# sslyze x.x.x.x

 CHECKING CONNECTIVITY TO SERVER(S)
 ----------------------------------

   x.x.x.x:443        => ERROR: Unexpected connection error: "('error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter\n',)"; discarding scan.
 SCANS COMPLETED IN 0.15696 S

Expected behavior
should have returned data from the host; however, I received an error instead. I confirmed that this host was live, and that it contained sslv3 ciphers by leveraging sslscan from the same device. Ssl scan returned data, however, sslyze errored out.

Python environment (please complete the following information):

  • OS: kali linux
  • Python version: 3.9.6

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions