{"action":"created","issue":{"url":"https://api.github.com/repos/rbsec/sslscan/issues/62","labels_url":"https://api.github.com/repos/rbsec/sslscan/issues/62/labels{/name}","comments_url":"https://api.github.com/repos/rbsec/sslscan/issues/62/comments","events_url":"https://api.github.com/repos/rbsec/sslscan/issues/62/events","html_url":"https://github.com/rbsec/sslscan/issues/62","id":106624326,"number":62,"title":"Feature Request - cipher suites ordered by server preference","user":{"login":"fishouttah20","id":11758944,"avatar_url":"https://avatars.githubusercontent.com/u/11758944?v=3","gravatar_id":"","url":"https://api.github.com/users/fishouttah20","html_url":"https://github.com/fishouttah20","followers_url":"https://api.github.com/users/fishouttah20/followers","following_url":"https://api.github.com/users/fishouttah20/following{/other_user}","gists_url":"https://api.github.com/users/fishouttah20/gists{/gist_id}","starred_url":"https://api.github.com/users/fishouttah20/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fishouttah20/subscriptions","organizations_url":"https://api.github.com/users/fishouttah20/orgs","repos_url":"https://api.github.com/users/fishouttah20/repos","events_url":"https://api.github.com/users/fishouttah20/events{/privacy}","received_events_url":"https://api.github.com/users/fishouttah20/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-09-15T19:05:54Z","updated_at":"2015-09-23T18:47:04Z","closed_at":null,"body":"Really great that you've improved and incorporated other updates to the original sslscan. While this gives the top preferred cipher for each protocol, the remaining ciphers are just listed in the order they are checked. Ideally there would be an option to determine the full cipher preference order for a server, ordered from most preferred to least (assuming server cipher preference enforcement is enabled) \r\n\r\nAppreciate this might be a good bit of work and a lot of requests to the server to determine but figured it wouldn't hurt to ask."},"comment":{"url":"https://api.github.com/repos/rbsec/sslscan/issues/comments/142694051","html_url":"https://github.com/rbsec/sslscan/issues/62#issuecomment-142694051","issue_url":"https://api.github.com/repos/rbsec/sslscan/issues/62","id":142694051,"user":{"login":"fishouttah20","id":11758944,"avatar_url":"https://avatars.githubusercontent.com/u/11758944?v=3","gravatar_id":"","url":"https://api.github.com/users/fishouttah20","html_url":"https://github.com/fishouttah20","followers_url":"https://api.github.com/users/fishouttah20/followers","following_url":"https://api.github.com/users/fishouttah20/following{/other_user}","gists_url":"https://api.github.com/users/fishouttah20/gists{/gist_id}","starred_url":"https://api.github.com/users/fishouttah20/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fishouttah20/subscriptions","organizations_url":"https://api.github.com/users/fishouttah20/orgs","repos_url":"https://api.github.com/users/fishouttah20/repos","events_url":"https://api.github.com/users/fishouttah20/events{/privacy}","received_events_url":"https://api.github.com/users/fishouttah20/received_events","type":"User","site_admin":false},"created_at":"2015-09-23T18:47:04Z","updated_at":"2015-09-23T18:47:04Z","body":"You guys work fast, impressive. Tried to test it out and I'm getting a seg fault on the latest ubuntu with OpenSSL 1.0.1f (tried a few sites):\r\n\r\nVersion: 1.10.6-rbsec-12-g1c2721d\r\nOpenSSL 1.0.1f 6 Jan 2014\r\n\r\nOpenSSL version does not support SSLv2\r\nSSLv2 ciphers will not be detected\r\n\r\nSome servers will fail to response to SSLv3 ciphers over STARTTLS\r\nIf your scan hangs, try using the --tlsall option\r\n\r\nTesting SSL server yahoo.com on port 443\r\n\r\n  TLS renegotiation:\r\nOpenSSL OpenSSL 1.0.1f 6 Jan 2014 looks like version 0.9.8m or later; I will try SSL_OP to enable renegotiation\r\nSegmentation fault (core dumped)\r\n"}}