Re: Sambar sendmail false positives

From: Thomas Reinke (reinke@e-softinc.com)
Date: Fri Jan 04 2002 - 11:41:57 PST

  • Next message: Thomas Reinke: "Re: Sambar sendmail false positives"

    Ok...that might be true for the 1.1 stream - we're still on the
    1.0 stream and SSL connections aren't supported there.  In that
    case, the connection opened is non-SSL only, and the test trips
    without the appropriate eliminating code.
    
    Thomas
    
    Michel Arboi wrote:
    > 
    > Thomas Reinke <reinke@e-softinc.com> writes:
    > 
    > > >  soc = open_sock_tcp(port);
    > 
    > This will open a SSL connection if SSL was detected on this port by
    > find_service
    > 
    > > >   if("you're speaking plain http to an ssl-enabled server port" ><
    > 
    > So I suppose that this will never work.
    > 
    > You'd rather use, as in netscape_crash.nasl:
    > soc = open_sock_tcp(port, transport:ENCAPS_IP);
    
    -- 
    ------------------------------------------------------------
    E-Soft Inc.                         http://www.e-softinc.com
    Publishers of SecuritySpace     http://www.securityspace.com
    Tel: 1-905-331-2260                      Fax: 1-905-331-2504   
    Tollfree in North America: 1-800-799-4831
    



    This archive was generated by hypermail 2b30 : Fri Jan 04 2002 - 11:40:35 PST