tls-try

Protocol: tls.try

tls.try makes a handshake that offers one version of TLS only, and, up to TLS 1.2, one cipher suite if one is named. Here, whether a server still accepts TLS 1.0.

How to read it

• tls.try(443, '1.0'): the port and the version, 1.0, 1.1, 1.2 or 1.3, checked by the validation when written as a text.
• A server that refuses gives an answer: accepted is false, alert says why. Only a server no handshake reaches stops the collector.
• if ($try['accepted']): a true or false value is a condition by itself.

To adapt it

• A weak suite: tls.try(443, '1.2', 'TLS_RSA_WITH_RC4_128_SHA'). Under TLS 1.3 no suite is chosen.
• These are the only calls whose connection settings are written in the code: they test what a server accepts. Every other protocol takes its TLS settings from the tree.