Handle certificate unknown error

Sometimes OpenSSL will throw a certificate unknown error that was previously not handled, causing sslyze to crash.
nabla-c0d3 · Aug 1, 2024 · 6a8d48f · 6a8d48f
1 parent 761892b
commit 6a8d48f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/sslyze/connection_helpers/tls_connection.py b/sslyze/connection_helpers/tls_connection.py
@@ -127,6 +127,7 @@ def _open_socket(server_location: ServerNetworkLocation, network_timeout: int) -
     # enabled in the client; for example client only supports EC cipher suites but server returned an RSA certificate
     "wrong certificate type": "Server returned wrong certificate type",
     "invalid encoding": "TLS error: Invalid encoding",
+    "certificate unknown": "TLS alert: certificate unknown"
 }