Re: ssl-enum-ciphers not returning all ciphers

--===============9045983255023889822==
Content-Type: multipart/related; boundary="0000000000004a5c42058c325dce"

--0000000000004a5c42058c325dce
Content-Type: multipart/alternative; boundary="0000000000004a5c40058c325dcd"

--0000000000004a5c40058c325dcd
Content-Type: text/plain; charset="UTF-8"

Terry,

It looks like openssl s_client is also failing to connect, according to
these output lines:

On Tue, Jun 25, 2019 at 2:30 PM Lemons, Terry <[email protected]> wrote:

> 139674829317776:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert
> handshake failure:s3_pkt.c:1498:SSL alert number 40
>
> 139674829317776:error:140790E5:SSL routines:ssl23_write:ssl handshake
> failure:s23_lib.c:177:
>

In searching about, it seems that not all ciphers may be supported by every
Erlang release. You can follow the directions here to determine if some of
your ciphers are not supported:
https://www.rabbitmq.com/ssl.html#cipher-suites

That said, if you get any other tool (testssl.sh, SSLLabs, openssl
s_client, etc.) to show ciphers that Nmap's ssl-enum-ciphers does not show,
please let us know so we can investigate.

Dan

--0000000000004a5c40058c325dcd
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div>Terry,</div><div><br></div><div>It l=
ooks like openssl s_client is also failing to connect, according to these o=
utput lines:<br></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr"=
 class=3D"gmail_attr">On Tue, Jun 25, 2019 at 2:30 PM Lemons, Terry &lt;<a =
href=3D"mailto:[email protected]">[email protected]</a>&gt; wrote:<=
br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8e=
x;border-left:1px solid rgb(204,204,204);padding-left:1ex">





<div lang=3D"EN-US">
<div class=3D"gmail-m_2121372239395669067WordSection1"><span style=3D"color=
:rgb(31,73,125)"></span>
<p class=3D"MsoNormal"><span style=3D"color:rgb(31,73,125)">139674829317776=
:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:=
s3_pkt.c:1498:SSL alert number 40<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:rgb(31,73,125)">139674829317776=
:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:17=
7:<u></u><u></u></span></p>
</div></div></blockquote><div><br></div><div>In searching about, it seems t=
hat not all ciphers may be supported by every Erlang release. You can follo=
w the directions here to determine if some of your ciphers are not supporte=
d: <a href=3D"https://www.rabbitmq.com/ssl.html#cipher-suites">https://www.=
rabbitmq.com/ssl.html#cipher-suites</a></div><div><br></div><div>That said,=
 if you get any other tool (testssl.sh, SSLLabs, openssl s_client, etc.) to=
 show ciphers that Nmap&#39;s ssl-enum-ciphers does not show, please let us=
 know so we can investigate.<br></div><div><br></div><div>Dan<br> </div></d=
iv></div>

--0000000000004a5c40058c325dcd--
--0000000000004a5c42058c325dce
Content-Type: image/png; name="image001.png"
Content-Disposition: inline; filename="image001.png"
Content-Transfer-Encoding: base64
Content-ID: <16b91f2c01c4cff311>
X-Attachment-Id: 16b91f2c01c4cff311

iVBORw0KGgoAAAANSUhEUgAAAFAAAAAOCAYAAAC4lZsqAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAO
xAAADsQBlSsOGwAAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAAfFSURBVFhH
rVgJUJVVFP6AxwMUkH1RQFlLcSkUxcSy1RZbnLTMtIncclILtEHHprSpJicnW8apHFomx8hKJbPF
IrO0LFOgEgVEQEEWQRBBHryF13fue4/e4z2Wqc7Mz/z/u+fee+53zvnOuWjq2/VmOIgZHm5uCBni
6fhzP1/PHahEMPVXpUU5aRm7zWjWGWE2m+GlcUeAt8ZJx6B0DAAt8fH0gL+XR5+7dZm60XTFAJ2p
l9kyg3uI3bKH7Huxw4CwoVrwOANKQ7segT6e0Ho4K9e2daGiWQdujZgAb8QGevesp4l+86gjfLSL
50SCrxazEoOROS1KGeFKzrV2YXFeCb4rvQgQgMpLndhye4KDakVLJ67NKYCeh757bCh2P5DstFRh
XRumvVcE6LuxdMoIbJ2V2OeB3y2ox7PfnkFChK+TjpmOWjk9BgsmhKOIa6ZtPYY1N8Xi5Vti+wVw
85EarN1dgn1LU3B7YlCPbjlBy/yqHHWXuxBD0Dzc3VDV3AlfrTveoI3jwn2hMRgJq4AuHu00qsny
9wTBOXG+Dbl/NSD3wWRMjfJ3MGJ/eTMWf16KGm4i82deG4llk4YrnQsEK2yoJYIZFFy2G9189EYX
UUOdbppgFDv4GOSjH7nASEmPDUTe/LH96nXxPCZGwrbCOmSnRyPQReTLAgaG1dvHamFi5Mm7TUoa
r2A6nfoEz5Q1d0xPVshZXv+lGjPe/wPFK1KhAVEVwxODfLCR3hO5rDdh56lG/FDegrME8t6PTqBg
2UREDfNS4y//dBbrDlSpeXQL1nHeS7fGqbFnmc7b6NH1t8RhycRIGWZEu0HPRzzoSlSKyRgf9wHy
TcY9+1jHfm05aFq0P9ypu40AZadbztZbtv95Af5aD0xl5HUYLAB20+vzdp3C46nDsYERbC/edEr2
9SNxhMG1Zv8ZAihCb0UwYh5i6NtkGSev2FeGrUdr0cjU3PTzOWycMQrLvijDZ382UI086a/FW3cn
Yc6YUMVhGXtKsLe4Ua23Pr8C910VrHhlMBzk8nR9/Og6jh2VSYHwYlStnhaNJ785g9XXRStH9pY3
f6vBCtLGpycaFXAiByovoZFZtIHn7UteILD5zEILgCoInc16ZWYC8hiF51s7seNkE/Zz4dP17Srq
xLvb7x+NBEbu4XOtyCCHlDPspRCkJwXhg/uuRjQJd8+pJhjFs4Mg8sGAKGZqJawHIa2dJtyVFIys
byuQRzvmJIc6zDpY1cpCY8TC8eHIOV7fM/YlgUklZfWVMaI4NnyoepxLot0WPp7umBHjjx2FHWgh
P7bQK5Jm88aFI3fOaKX5OtP16e8qYOgyccwdT02NwpY7LYXkVXLF2vxKmMTz/1MYSoU+VNWC5V+W
KX61ibxL97BhxkiEsQCKGPmjpPwKZtPmI9VOAL7CrHpwXJhyiD3/NV7WI9Gu0vbnq34BtEy0Cx15
JQf8caEdeSVN+Jqe2vbreVUp/Fmpt96VqCpgG8FcsrcUO4voVbYlqqz/T2LiXtKmpLIKCwX/A6AF
LOEom9gsX5QSiZcOVeNYbRsmDfdTw+UtOvzO75x7rvpPlvULoI4W/sj0FACkigXxOdPQjlNNOszO
LbZsTAJOi/TFO/ckYTzLekFdOxbuOomTtZLqbogL9kE924sO+3D5DyZfYaszLsIPj020VPzBiC9t
nDsmBJsOV+PTB8aoKZI500cGINLPuUUL5W+n2X4NRiwAqt7PmaSyWWVUm0Ig56eGqCKydG8ZdksR
sTbaIUzzneztYlihc47XYdXX5dBJO8T1Vl4XheWTRmDy+0UsbYL1AERIO7wH4DcxU2/XbgzmkKKT
SVum5hSq5tqXNLCbnJg3z3UrdCcrcgb7WxMJty8e/KnqklrDAiAPVk9+y1XVFbhC0t95shH5p5vV
dwiLQTarmdw2ds1LxouMuGfYrgivNTGyZn9SjLGhQ/Ahm1ypwN6M1NfuiFd9oTTbXZJrGjahfLft
YXGcWa05jJVaMQWdUdzU4ajDQwSR02Ym/NPg/pt6FB/og8kj/PBBUYOKuuhh3kjltyu5OTYAIbRp
449n8fyNo1zqvHjonCqgGtZuBeBpRtr8j61paTclmimYywiTDW2y/oaRSCGXLPm8hBW6S6VtQfVl
FalJBPfD2VdjirXx1tEZwltCA8fYOznswbFEFqnt1JcIFQDzK1uQT37tEfJpUnwASq0ASqshxWEg
kWP17izWshdcwFZLZMtt8Q5LiK6tjREu3cEO4/r3CuHBvbI4z480ICJXyc0Er5D8KTqantRlhFBL
pbOEbTzfZzGUs9g/hVurmv2Od3Ds8OIULNpTigNlvMpx+lwWkLfIhcESUVaR4uvF6mwwEyFPfmjt
OIcAhrD/FNrXSHqLshQdq7FqCa3J4V4u18pDLF5TmI5OQupYyVvHgmsi1DL2BUV002OGqbPIXXr2
6BCH6UPoPA3ttEly2FAcWZKCLF7lbny3EKOsVzm5E/ty8YMZ1yi7NDWrJjvZ4caD2K5i/Xl6FFP7
+4wJeIZNs6RiJsHuLXHcuHJlap/LyK3Cz0uDmsw01zp0qKc41yqLUiJwLxt0nSselH8mWO/t02MC
kP/oBKc1Dz4ywZIRveSrh8fDmyDaS1LwEOxbOB7neReWe7Fwopw5jqlrk78BL+gFrBZ4pbYAAAAA
SUVORK5CYII=
--0000000000004a5c42058c325dce--

--===============9045983255023889822==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
--===============9045983255023889822==--