Issue

The current version of github.com/zmap/zcrypto used by utils does not support TLS 1.3 analysis, causing compatibility issues for downstream consumers.

Details

• Current zcrypto version: v0.0.0-20240512203510-0fef58d9a9db
• Required version (with TLS 1.3 support): v0.0.0-20250218123239-97e834cd7132

Error Messages

/go/pkg/mod/github.com/projectdiscovery/[email protected]/crypto/ztls.go:53:44: conn.ClientHelloRaw undefined (type *"github.com/zmap/zcrypto/tls".Conn has no field or method ClientHelloRaw)
/go/pkg/mod/github.com/projectdiscovery/[email protected]/crypto/ztls.go:59:46: conn.GetHeartbleedLog undefined (type *"github.com/zmap/zcrypto/tls".Conn has no field or method GetHeartbleedLog)

Impact

Downstream projects that depend on utils cannot use TLS 1.3–capable versions of zcrypto due to Go's single-version-per-module constraint. This blocks TLS 1.3 analysis capabilities in dependent projects.

References

• Original issue: [BUG] nuclei SDK depends on zcrypto version that cannot analyze TLS 1.3 data nuclei#6752
• Reported by: @zohar-qiz
• Requested by: @dwisiswant0 at [BUG] nuclei SDK depends on zcrypto version that cannot analyze TLS 1.3 data nuclei#6752 (comment)