Socket timeout when test heartbleed about sslyze HOT 8 CLOSED

The test for heartbleed is not 100% reliable and may trigger a timeout. The methodology used by SSLyze is described here: https://blog.mozilla.org/security/2014/04/12/testing-for-heartbleed-vulnerability-without-exploiting-the-server/

from sslyze.

Is the timeout an indication that the server is not vulnerable? This times out every time for me.

from sslyze.

im getting the timeout aswell. Would be nice to get an answer to earlier question.

from sslyze.

This was fixed in #217

from sslyze.

With the migration to 1.1.1. I'm getting [u'Unhandled exception while running --heartbleed:', u'timeout - timed out'] on a domain that never triggered error with previous version

from sslyze.

this "exception" is already in 1.0.0
but as @nabla-c0d3 said, you get an exception if u are not vulnerable to heartbleed.

from sslyze.

@glestel can you post or send me the domain? I am working on a better fix in the raw-tls-parsing branch so I want to try it.

from sslyze.

Sent you a mail with domains of interest

from sslyze.