Make sensitivity of is_vulnerable_to_client_renegotiation_dos configurable #661
Conversation
c7dee9a to
9775655
Compare
9775655 to
f262aa8
Compare
|
Hello ! Thanks for the contribution, and nice catch on using an One last request : could you add a simple test that just ensures that Thanks! |
4655a00 to
2c7a787
Compare
2c7a787 to
fca777b
Compare
The only practical way I see to test that, is to track the number of attempts. Which actually can be useful for users that get into these details anyways. Code may be a bit clunky, I was struggling with the best way to return multiple values. |
|
It looks good - merging this as is. Thanks ! |
Trying renegotiation multiple times to find mitigations makes sense. However, it is quite rare for servers to allow 1 but not too many renegotiations. For my use, I want to test compliance with requirements that do not allow it at all. Therefore, I'd like it to be configurable.