Protocol: Missing Secure Client Renegotiation¶

Identifier: issue_ssl_missing_secure_client_renegotiation

Scanner Support¶

Description¶

TLS renegotiation without the secure renegotiation indication can allow prefix-injection attacks.

How we test: We inspect whether the server supports secure client-initiated TLS renegotiation.

References:

• https://www.rfc-editor.org/rfc/rfc5746

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_missing_secure_client_renegotiation:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.