I'm doing two tests using the openssl s_client command to identify anonymous. I did two tests:
One first test: I'm using the following command to anonymous ciphers:
openssl s_client -cipher aNULL -connect example.com:443
And I get the answer:
No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 4565 bytes and written 338 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: 626B89DDAD15392B05CC2D638566569BECC252C8AACD904BA22470B84BB4B2DC Session-ID-ctx: Resumption PSK: 46383EA3BEA5C2AC3B1C43FE330146581F9CDBA55D0D43AABB3F45C18CA7871770F6DD6E0C94353DD647162AE586203E PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket:
And second test get the answer::
CONNECTED(00000003) 140420107691392:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1543:SSL alert number 40 --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 264 bytes Verification: OK --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
I have a question, am I vulnerable to anonymous ciphers in either of the two examples? Please help me.