☰

使用旧密码访问 HTTPS 服务器

tag-icon • tag-icon ssl https tls
使用旧密码访问 HTTPS 服务器

我正在查看 HP 打印机的 EWS，不小心设置了一个旧密码，我无法再访问，我总是ERR_SSL_VERSION_OR_CIPHER_MISMATCH从 chrome 获取。

我需要设置哪些浏览器才能再次访问此 https 服务器？我测试了 Chrome、Firefox、Edge、iexplore，但一无所获。

我通过nmap可用的密码检查访问 https 服务器：

gabriel@pc:~$ nmap --script ssl-enum-ciphers -p 443 192.168.223.1
Starting Nmap 7.70 ( https://nmap.org )
Nmap scan report for 192.168.223.1
Host is up (0.045s latency).

PORT    STATE SERVICE
443/tcp open  https
| ssl-enum-ciphers: 
|   TLSv1.0: 
|     ciphers: 
|       TLS_RSA_WITH_DES_CBC_SHA (rsa 2048) - C
|       TLS_RSA_WITH_RC4_128_MD5 (rsa 2048) - C
|       TLS_RSA_WITH_RC4_128_SHA (rsa 2048) - C
|     compressors: 
|       NULL
|     cipher preference: client
|     warnings: 
|       64-bit block cipher DES vulnerable to SWEET32 attack
|       Broken cipher RC4 is deprecated by RFC 7465
|       Ciphersuite uses MD5 for message integrity
|   TLSv1.1: 
|     ciphers: 
|       TLS_RSA_WITH_DES_CBC_SHA (rsa 2048) - C
|       TLS_RSA_WITH_RC4_128_MD5 (rsa 2048) - C
|       TLS_RSA_WITH_RC4_128_SHA (rsa 2048) - C
|     compressors: 
|       NULL
|     cipher preference: client
|     warnings: 
|       64-bit block cipher DES vulnerable to SWEET32 attack
|       Broken cipher RC4 is deprecated by RFC 7465
|       Ciphersuite uses MD5 for message integrity
|   TLSv1.2: 
|     ciphers: 
|       TLS_RSA_WITH_DES_CBC_SHA (rsa 2048) - C
|       TLS_RSA_WITH_RC4_128_MD5 (rsa 2048) - C
|       TLS_RSA_WITH_RC4_128_SHA (rsa 2048) - C
|     compressors: 
|       NULL
|     cipher preference: client
|     warnings: 
|       64-bit block cipher DES vulnerable to SWEET32 attack
|       Broken cipher RC4 is deprecated by RFC 7465
|       Ciphersuite uses MD5 for message integrity
|_  least strength: C

Nmap done: 1 IP address (1 host up) scanned in 1.44 seconds

答案1

一个不太优雅的解决方案是找到一个旧的 Linux 发行版并安装它（可能是作为 VM），然后使用该发行版的浏览器访问您的打印机。

旧发行版可从以下网址获取：https://soft.lafibre.info/

相关内容