Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Socket timeout when test heartbleed #11

Closed
malaikuangren opened this issue Nov 4, 2014 · 8 comments · Fixed by #232
Closed

Socket timeout when test heartbleed #11

malaikuangren opened this issue Nov 4, 2014 · 8 comments · Fixed by #232

Comments

@malaikuangren
Copy link

All, I tried to test my site(https://192.168.2.104) if there exist vulnerability of heartbleed but got the socket time out problem. Please help to review below out put.

CHECKING HOST(S) AVAILABILITY


192.168.2.104:443 => 192.168.2.104:443

SCAN RESULTS FOR 192.168.2.104:443 - 192.168.2.104:443


Unhandled exception when processing --heartbleed:
socket.timeout - timed out

I am sure my site (https://192.168.2.104) can be reached in the network.
Is there any reason cause this exception?

Thanks,
Joe

@malaikuangren malaikuangren changed the title Socket timeout when test reneg Socket timeout when test heartbleed Nov 4, 2014
@nabla-c0d3
Copy link
Owner

The test for heartbleed is not 100% reliable and may trigger a timeout. The methodology used by SSLyze is described here: https://blog.mozilla.org/security/2014/04/12/testing-for-heartbleed-vulnerability-without-exploiting-the-server/

@six8
Copy link

six8 commented Feb 3, 2017

Is the timeout an indication that the server is not vulnerable? This times out every time for me.

@mhuuhka
Copy link

mhuuhka commented May 18, 2017

im getting the timeout aswell. Would be nice to get an answer to earlier question.

@nabla-c0d3
Copy link
Owner

nabla-c0d3 commented May 20, 2017

This was fixed in #217

@glestel
Copy link
Contributor

glestel commented May 24, 2017

With the migration to 1.1.1. I'm getting [u'Unhandled exception while running --heartbleed:', u'timeout - timed out'] on a domain that never triggered error with previous version

@ericrange
Copy link

this "exception" is already in 1.0.0
but as @nabla-c0d3 said, you get an exception if u are not vulnerable to heartbleed.

@nabla-c0d3
Copy link
Owner

@glestel can you post or send me the domain? I am working on a better fix in the raw-tls-parsing branch so I want to try it.

@nabla-c0d3 nabla-c0d3 reopened this May 24, 2017
@glestel
Copy link
Contributor

glestel commented May 29, 2017

Sent you a mail with domains of interest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
6 participants