Protocol: Missing SSL Secure Renegotiation¶

Identifier: issue_ssl_missing_secure_renegotiation

Scanner(s) Support¶

Description¶

TLS renegotiation without RFC 5746 protections can let an attacker prefix data to a victim's TLS session.

How we test: We inspect the TLS handshake for the secure renegotiation indication extension.

References:

• https://www.rfc-editor.org/rfc/rfc5746

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_missing_secure_renegotiation:
    skip: false

Reference¶

skip¶

Type : boolean

Skip the test if true.