-
Notifications
You must be signed in to change notification settings - Fork 479
Description
Describe the bug
When performing a scan against certain hosts where sslv3 is enabled, sslyze returns the following error "error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter\n"
To Reproduce
Steps to reproduce the behavior:
ran a default scan by just calling sslyze and the targeted ip and received the following result
Note the ip has been sanitized for legal concerns, the actual host was provided directly to the creator of sslyze.
# sslyze x.x.x.x
CHECKING CONNECTIVITY TO SERVER(S)
----------------------------------
x.x.x.x:443 => ERROR: Unexpected connection error: "('error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter\n',)"; discarding scan.
SCANS COMPLETED IN 0.15696 S
Expected behavior
should have returned data from the host; however, I received an error instead. I confirmed that this host was live, and that it contained sslv3 ciphers by leveraging sslscan from the same device. Ssl scan returned data, however, sslyze errored out.
Python environment (please complete the following information):
- OS: kali linux
- Python version: 3.9.6