Potentially vulnerability using TLS CBC ciphers

[Charles1000Chen]

Describe the bug

Potentially vulnerability using TLS CBC ciphers

Expected behavior

The test item "LUCKY13" shoud be "OK" in testssh.sh test result.

To Reproduce
Test with testssl.sh, it will report the issue in its test result.

Environment information

• Output of zhmc_prometheus_exporter --version:
• HMC version:

Command output

{
    "id"           : "LUCKY13",
    "severity"     : "LOW",
    "cve"          : "CVE-2013-0169",
    "cwe"          : "CWE-310",
    "finding"      : "potentially vulnerable, uses TLS CBC ciphers"
}

Log file
<-- If possible, attach a log file generated with '--log-comp all=debug --log exporter.log'. -->

[andy-maier]

See #508 , should be solved together.

[andy-maier]

The two ciphers are CBC ciphers that are reported by testssl.sh:

LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches

This was on macOS with:

• Python 3.12.3
• OpenSSL 3.3.0
• testssl.sh 3.0.8

[andy-maier]

Solved with PR #551 .