SSL Options #998

New Issue

2026-10-05T04:57:51+02:00

adam commented

2026-10-05 04:57:51 +02:00

i used https://testssl.sh/dev/ to test the znc-sslports and got:

Using "OpenSSL 1.0.2-chacha (1.0.2k-dev)"
Obsoleted CBC ciphers (AES, ARIA etc.)    offered
Secure Client-Initiated Renegotiation     VULNERABLE (NOT ok), DoS threat (6 attempts)
LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches

znc is latest git - compiled against libressl 3.3.4

i used https://testssl.sh/dev/ to test the znc-sslports and got: ``` Using "OpenSSL 1.0.2-chacha (1.0.2k-dev)" Obsoleted CBC ciphers (AES, ARIA etc.) offered Secure Client-Initiated Renegotiation VULNERABLE (NOT ok), DoS threat (6 attempts) LUCKY13 (CVE-2013-0169), experimental potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches ``` znc is latest git - compiled against libressl 3.3.4

adam closed this issue

2026-10-05 04:57:51 +02:00

adam commented

2026-10-05 04:57:51 +02:00

the cipher related issues should be mitigatable via SSLCiphers: https://wiki.znc.in/Configuration
Secure Client-Initiated Renegotiation is a duplicate of #1162

the cipher related issues should be mitigatable via `SSLCiphers`: https://wiki.znc.in/Configuration Secure Client-Initiated Renegotiation is a duplicate of #1162

adam commented

2026-10-05 04:57:52 +02:00

thanks - wasnt aware thats a 'runtime'-cfg option since 1.6 - i'll test.

thanks - wasnt aware thats a 'runtime'-cfg option since 1.6 - i'll test.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: adam/znc#998