Protocol: Missing Next Protocol Negotiation¶

Identifier: issue_ssl_missing_npn

Scanner Support¶

Description¶

Missing Next Protocol Negotiation can prevent older TLS clients from selecting an application protocol.

How we test: We inspect the TLS handshake for the NPN extension.

References:

• https://datatracker.ietf.org/doc/html/draft-agl-tls-nextprotoneg-04

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_missing_npn:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.