PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-22 15:39:03 +00:00
Code Issues Projects Releases Wiki Activity

Documentation for the cipher ordering feature

Browse Source
This commit is contained in:
dmiller
2014-08-12 02:38:13 +00:00
parent a61755699f
commit aadd8d864c
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
scripts/ssl-enum-ciphers.nse
View File

@@ -29,6 +29,12 @@ methods a server supports than SSLv2. A client lists the ciphers and compressors
that it is capable of supporting, and the server will respond with a single
cipher and compressor chosen, or a rejection notice.
Some servers use the client's ciphersuite ordering: they choose the first of
the client's offered suites that they also support. Other servers prefer their
own ordering: they choose their most preferred suite from among those the
client offers. In the case of server ordering, the script makes extra probes to
discover the server's sorted preference list.
This script is intrusive since it must initiate many connections to a server,
and therefore is quite noisy.
]]