3 ms·
I had soooo much fun with that when I found out that one of my clients was connecting to a Logjam-vulnerable server and the OpenSSL-based code connecting to it
by Natsu 10y ago
I had soooo much fun with that when I found out that one of my clients was connecting to a Logjam-vulnerable server and the OpenSSL-based code connecting to it suddenly failed without explanation after a security patch.
I found it by accident because I was able to reproduce with openssl s_server, which happened to be presenting a weak DH key by default as well.
- Natsu 10y agoJust in case the above is not clear enough, newer versions of OpenSSL refuse to connect to anything with a weak DH key and nothing was showing up in our logs, making it extra confusing.