-
Notifications
You must be signed in to change notification settings - Fork 480
Open
Labels
Description
Firstly, thanks for sslyze!
When testing my domains against Mozilla's intermediate configuration, I get a failure when upgrading to version 6.1.0. sslyze 6.0.0 and ssllabs.com are still happy with my configuration.
Steps to reproduce the behaviour:
- Install SSLyze using pip
- Run
sslyze --mozilla_config intermediate sadilar.org
- See output:
sadilar.org:443: FAILED - Not compliant.
* tls_curves: TLS curves {'secp256k1', 'secp521r1'} are supported, but should be rejected.
* tls_vulnerability_extended_master_secret: Server does not support the Extended Master Secret TLS extension.
Expected behaviour
With sslyze 6.0.0 for the same host passes successfully:
sadilar.org:443: OK - Compliant.
Python environment:
- My local Mageia OS with Python 3.10
- also on our CI system which is using the docker image python:3.11-slim (Debian based)
Additional related issue:
On a different host (mvn.sadilar.org) which has a different web server (but also the Mozilla intermediate configuration), gives different output, but this is also new with sslyze 6.1.0:
mvn.sadilar.org:443: FAILED - Not compliant.
* certificate_curves: Certificate curve is secp256r1, should be one of {'secp384r1', 'prime256v1'}.
* tls_curves: TLS curves {'secp521r1', 'X448'} are supported, but should be rejected.
Metadata
Metadata
Assignees
Labels
Projects
Status
Done