Disable PSK cipher suites for server connectivity testing

nabla-c0d3 · Nov 25, 2017 · f1abb66 · f1abb66
1 parent 19eaa76
commit f1abb66
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sslyze/server_connectivity.py b/sslyze/server_connectivity.py
@@ -220,7 +220,7 @@ def test_connectivity_to_server(self, network_timeout=None):
         for ssl_version in [OpenSslVersionEnum.TLSV1_2, OpenSslVersionEnum.TLSV1_1, OpenSslVersionEnum.TLSV1,
                             OpenSslVersionEnum.SSLV3, OpenSslVersionEnum.TLSV1_3, OpenSslVersionEnum.SSLV23]:
             # First try the default cipher list, and then all ciphers
-            for cipher_list in [SSLConnection.DEFAULT_SSL_CIPHER_LIST, 'ALL:COMPLEMENTOFALL']:
+            for cipher_list in [SSLConnection.DEFAULT_SSL_CIPHER_LIST, 'ALL:COMPLEMENTOFALL:-PSK:-SRP']:
                 ssl_connection = self.get_preconfigured_ssl_connection(override_ssl_version=ssl_version,
                                                                        should_ignore_client_auth=False)
                 ssl_connection.ssl_client.set_cipher_list(cipher_list)