Template for a good false-positive report, formatted with Markdown : versions used (SonarQube, Scanner, language analyzer) SonarQube ID information Server ID: 69FF93D0-AXobHJEaf-WIDwV27NKO Version: 8.9.1.44547 Date: 2021-09-09 C++ Qube correctly identified the TLS < 1.2, but reopened the issu…

Hi, @glennclapp and welcome! I am one of the developers working on the implementation of the rule detecting weak SSL and TLS versions used in C sources. I’m afraid I need more information to diagnose this issue. I tried to reproduce the issue, and I get no reports for the line curl_easy_setopt(cur…

Hi @glennclapp Let me know if the issue is still relevant to you. Otherwise, I will close the topic in 1 week.

Use stronger SSL and TLS versions

Rules and Languages Report False-positive / False-negative...

Topic		Replies	Views
Weak SSL and TLS versions used in C sources Report False-positive / False-negative... cfamily , security , sonarqube-cloud	3	581	September 13, 2023
FP: Use stronger SSL and TLS versions with curl_easy_init() Report False-positive / False-negative... cfamily	3	1057	October 19, 2023
FP: - Weak SSL/TLS protocols should not be used [c:S4423] - curl with CURL_SSLVERSION_TLSv1_2 Report False-positive / False-negative... security , sonarqube-cloud	2	138	March 7, 2025
Use stronger SSL and TLS versions when I use libcurl to connect to the sftp server Report False-positive / False-negative... cfamily	7	357	November 11, 2024
Curl SSL/TLS configuration should be chosen carefully New rules / language support php	3	2437	September 24, 2018

Use stronger SSL and TLS versions

Related topics