mailing list archives
Re: Exp Branch for OpenSSL on Windows
From: Kris Katterjohn <katterjohn () gmail com>
Date: Mon, 19 May 2008 20:15:45 -0500
-----BEGIN PGP SIGNED MESSAGE-----
On 15/05/2008 17:01, Kris Katterjohn wrote:
Has anybody tested this at all? Just let me know if you have/had any
As I said before, you shouldn't have to change anything in your build
procedure; it should just work.
It built just fine with no changes
Great, thanks for testing.
I had a play with version detection against some ssl websites and
noticed that if nmap couldn't get a version match from "Server Hello"
messages and had to go as far as handling "change cipher spec" and
"encrypted handshake" messages, the cpu cycles went through the roof.
I thought I'd see if building OpenSSL on this machine would make any
difference. This was straightforward too, due to the great
upgrade-guide (I was thrown slightly by "Compilation failed" messages
when I ran do_ms.bat and thought it might be worth updating the guide to
mention that these can be safely ignored).
I rebuilt nmap with openssl, but it didn't have any appreciable effect
and I note that in the minute that it took to successfully complete
version detection, one of my dual cores was at full-pelt for around 45
seconds. I'll look into this more deeply, but I wonder if anyone else
I haven't noticed anything like this happening, but I'll try against
some more hosts. Have you been able to look into it any more?
Thanks a lot,
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
Sent through the nmap-dev mailing list
Archived at http://SecLists.Org