Skip to content

Commit 6577728

Browse files
author
Brent Cook
committed
enable auto-negotiation for TLS version with SQL Server
1 parent f891248 commit 6577728

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

lib/metasploit/framework/mssql/tdssslproxy.rb

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,8 +51,9 @@ def cleanup
5151
def setup_ssl
5252
@running = true
5353
@t1 = Thread.start { ssl_setup_thread }
54-
ssl_context = OpenSSL::SSL::SSLContext.new(:TLSv1)
55-
@ssl_socket = OpenSSL::SSL::SSLSocket.new(@s1, ssl_context)
54+
ctx = OpenSSL::SSL::SSLContext.new(:SSLv23)
55+
ctx.ciphers = "ALL:!ADH:!EXPORT:!SSLv2:!SSLv3:+HIGH:+MEDIUM"
56+
@ssl_socket = OpenSSL::SSL::SSLSocket.new(@s1, ctx)
5657
@ssl_socket.connect
5758
end
5859

0 commit comments

Comments
 (0)