Skip to content

Commit b60b644

Browse files
committed
[#555] Handle sslv3 alert illegal parameter
1 parent 1b0905d commit b60b644

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

sslyze/connection_helpers/tls_connection.py

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -117,6 +117,9 @@ def _open_socket(server_location: ServerNetworkLocation, network_timeout: int) -
117117
"alert bad record mac": "TLS alert: bad record mac",
118118
"tlsv1 alert internal error": "TLS alert: Internal error",
119119
"illegal padding": "TLS alert: Illegal padding",
120+
# illegal parameter is sometimes used by server to reject an invalid client certificate
121+
# https://github.com/nabla-c0d3/sslyze/issues/555
122+
"illegal parameter": "TLS alert: Illegal parameter",
120123
# Error returned by OpenSSL when the server didn't return a certificate that can work with the cipher suites
121124
# enabled in the client; for example client only supports EC cipher suites but server returned an RSA certificate
122125
"wrong certificate type": "Server returned wrong certificate type",

0 commit comments

Comments
 (0)