SNI remote target causes [SSL: WRONG_VERSION_NUMBER] wrong version number

Question

SNI remote target causes [SSL: WRONG_VERSION_NUMBER] wrong version number

rbeede opened this issue 4 years ago · 4 comments

rbeede commented 4 years ago

When running with a command line like:
python3 slowloris.py -s 100 -v -ua -p 443 --https example.com

If the remote target has strict requirements for SNI hostname checks then the connection can fail with:

[SSL: WRONG_VERSION_NUMBER] wrong version number

The fix was to use Python3 library methods to change
s = ssl.wrap_socket(s)

to

context = ssl.create_default_context()
s = context.wrap_socket(s,server_hostname=ip)

Answer 1 · 2020-12-03T08:08:03.000Z

Thanks for the report, it is indeed problematic to not send SNI information when wrapping the socket with TLS.

Answer 2 · 2021-03-23T18:59:01.000Z

I tried this fix, but still getting [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1123)

Answer 3 · 2021-04-02T21:03:51.000Z

HI @rbeede, this issue should be fixed now. Please let me know if there are still problems.

@richstokes your problem might be caused by not setting the HTTPS port. Can you try with --https --port 443 and report back if there are still problems?

Answer 4 · 2021-05-08T16:37:49.000Z

As I haven't received an update, I'm assuming this issue is fixed.