PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 04:31:29 +00:00
Code Issues Projects Releases Wiki Activity

Send supported signature algorithms for TLSv1.2

Browse Source
This commit is contained in:
dmiller
2015-03-24 23:22:19 +00:00
parent 6d178c39bf
commit ed86473b0c
2 changed files with 37 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
scripts/ssl-enum-ciphers.nse
View File

@@ -328,12 +328,21 @@ local function remove_high_byte_ciphers(t)
return output
end
-- Claim to support every hash and signature algorithm combination (TLSv1.2 only)
local sigalgs = {}
for hash, _ in pairs(tls.HashAlgorithms) do
for sig, _ in pairs(tls.SignatureAlgorithms) do
sigalgs[#sigalgs+1] = {hash, sig}
end
end
-- Claim to support every elliptic curve and EC point format
local base_extensions = {
-- Claim to support every elliptic curve
["elliptic_curves"] = tls.EXTENSION_HELPERS["elliptic_curves"](sorted_keys(tls.ELLIPTIC_CURVES)),
-- Claim to support every EC point format
["ec_point_formats"] = tls.EXTENSION_HELPERS["ec_point_formats"](sorted_keys(tls.EC_POINT_FORMATS)),
["signature_algorithms"] = tls.EXTENSION_HELPERS["signature_algorithms"](sigalgs)
}
-- Recursively copy a table.