Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1305 from drwetter/renego_fixes 

Add CVE for Secure Client-Initiated Renegotiation vulnerability
This commit is contained in:
Dirk Wetter 2019-08-09 19:46:51 +02:00 committed by GitHub
parent 5fed82f4c2 fc1206cfea
commit 251071081e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
testssl.sh
View File

@ -14100,6 +14100,7 @@ run_renego() {
pr_bold " Secure Client-Initiated Renegotiation "
jsonID="secure_client_renego"
cve="CVE-2011-1473"
# see: https://blog.qualys.com/ssllabs/2011/10/31/tls-renegotiation-and-denial-of-service-attacks
# http://blog.ivanristic.com/2009/12/testing-for-ssl-renegotiation.html -- head/get doesn't seem to be needed though
# https://archive.fo/20130415224936/http://www.thc.org/thc-ssl-dos/, https://vincent.bernat.ch/en/blog/2011-ssl-dos-mitigation