Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.devel.release > #67513
| From | Sebastian Andrzej Siewior <sebastian@breakpoint.cc> |
|---|---|
| Newsgroups | linux.debian.devel.release, linux.debian.security |
| Subject | embedding openssl source in sslcan |
| Date | 2016-12-22 13:40 +0100 |
| Message-ID | <sRaP8-140-13@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
tl;dr: Has anyone a problem if sslscan embeds openssl 1.0.2 in its source? sslscan [0] as packaged in Debian currently relies on external libssl as provided by the openssl package. The openssl package disables support compression, SSLv2 and SSLv3 which is good but it also means that sslscan can not detect a SSL implementation that is still providing support for one of these deprecated protocols or compression. One could say that it is not required to test for SSLv2 because if libssl does not support it then it is not possible for an application to offer it. However libssl is not the only SSL toolkit in Debian and one might need to scan a non-Debian / older machine. [0] https://github.com/rbsec/sslscan Sebastian
Back to linux.debian.devel.release | Previous | Next — Next in thread | Find similar | Unroll thread
embedding openssl source in sslcan Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2016-12-22 13:40 +0100
Re: embedding openssl source in sslcan Moritz Mühlenhoff <jmm@inutil.org> - 2016-12-24 19:10 +0100
Re: embedding openssl source in sslcan Jonathan Yu <jawnsy@cpan.org> - 2016-12-24 22:20 +0100
Re: embedding openssl source in sslcan "Thijs Kinkhorst" <thijs@debian.org> - 2017-01-02 11:40 +0100
Re: embedding openssl source in sslcan Christian Seiler <christian@iwakd.de> - 2017-01-02 17:20 +0100
Re: embedding openssl source in sslcan Julien Cristau <jcristau@debian.org> - 2016-12-31 17:40 +0100
Re: embedding openssl source in sslcan Raphael Hertzog <hertzog@debian.org> - 2017-01-01 16:40 +0100
Re: [Pkg-openssl-devel] embedding openssl source in sslcan Kurt Roeckx <kurt@roeckx.be> - 2017-01-01 17:50 +0100
Re: embedding openssl source in sslcan Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2017-01-05 21:40 +0100
Re: embedding openssl source in sslcan Moritz Mühlenhoff <jmm@inutil.org> - 2017-01-05 23:10 +0100
csiph-web