This is probably because, afaik, recent Ubuntu versions ship openssl
without SSLv2 support. By default, sslscan will try SSLv2, SSLv3, and
TLSv1. However, sslscan isn't expecting SSLv2 to be not available at
all.

To use sslscan on recent Ubuntu versions, use the --ssl3 or --tls1
options to sslscan.

Note that you should be very careful about testing remote servers for
SSLv2 support when using an Ubuntu client, including with "openssl
s_client -ssl2 -connect somehost:443".  Using an Ubuntu client, you may
incorrectly determine that the remote server doesn't support SSLv2 when
in fact it really does, it's just your client that doesn't support
SSLv2.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/663872

Title:
  sslscan fails with "ERROR: Could not create CTX object."

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to