Ok...that might be true for the 1.1 stream - we're still on the
1.0 stream and SSL connections aren't supported there. In that
case, the connection opened is non-SSL only, and the test trips
without the appropriate eliminating code.
Thomas
Michel Arboi wrote:
>
> Thomas Reinke <[EMAIL PROTECTED]> writes:
>
> > > soc = open_sock_tcp(port);
>
> This will open a SSL connection if SSL was detected on this port by
> find_service
>
> > > if("you're speaking plain http to an ssl-enabled server port" ><
>
> So I suppose that this will never work.
>
> You'd rather use, as in netscape_crash.nasl:
> soc = open_sock_tcp(port, transport:ENCAPS_IP);
--
------------------------------------------------------------
E-Soft Inc. http://www.e-softinc.com
Publishers of SecuritySpace http://www.securityspace.com
Tel: 1-905-331-2260 Fax: 1-905-331-2504
Tollfree in North America: 1-800-799-4831
