[pyOpenSSL] Re: [pyOpenSSL] How to detect if a port has SSL running?
Dave Aitel
dave at immunitysec.com
Wed Jan 15 14:24:28 CET 2003
Have you tried timoutsocket.py? I quite like it and it works on Windows.
-dave
On Wed, 15 Jan 2003 13:31:59 +0000
"mjabbur" <mjabbur at terra.com.br> wrote:
> My major problem is the timeout. If the server does not have SSL it
> will block forever. I've thought to use the alarm function but this
> script will also run on Windows which does not have support for alarm.
> Anyway I'll try the OpenSSL list.
>
> Thanks,
> Marlon
>
> ---------- Cabeçalho inicial -----------
>
> De: pyopenssl-list-admin at lists.sourceforge.net
> Para: pyopenssl-list at lists.sourceforge.net
> Cópia:
> Data: 15 Jan 2003 11:27:27 +0100
> Assunto: Re: [pyOpenSSL] How to detect if a port has SSL running?
>
> > tis 2003-01-14 klockan 14.14 skrev Marlon Jabbur:
> > > Hi list,
> > > I've been using pyOpenSSL for a while and I have a problem that I
> could
> > > not solve and maybe someone can help me.
> > > My problem is how do I detect if a arbitrary port is running or
> not SSL?
> > > When I establish a connection with a non-ssl server and I try to
> > > send some data it hangs forever, I'm guessing that the problem is
> > > that
> the
> > > SSL handshake never completes, but how can I catch this error in a
> > > script?
> >
> > I think it depends on the SSL version, and I think it is better to
> > ask this question on the openssl-users mailing list.
> >
> > I'm not sure you would *want* to be able to detect it (other than
> > timing out) since it invites solutions on the form "Try SSL and if
> > that fails, revert to non-encrypted communication" which in turn
> > invites downgrade attacks from a malicious party. I think. :)
> >
> >
> > /Martin
> >
> >
>
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by: Take your first step towards giving
>
> your online business a competitive advantage. Test-drive a Thawte SSL
> certificate - our easy online guide will show you how. Click here to
> get started: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0027en
> _______________________________________________
> pyopenssl-list mailing list
> pyopenssl-list at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/pyopenssl-list
>
More information about the pyopenssl-users
mailing list