Git/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2025-09-07 20:32:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Results from concurrent scans against multiple hosts are no longer improperly combined (#190).

Browse Source
This commit is contained in:
Joe Testa
2023-06-19 14:13:32 -04:00
parent 521a50a796
commit 639f11a5e5
8 changed files with 81 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/ssh_audit/gextest.py
View File

@ -208,7 +208,7 @@ class GEXTest:
# We flag moduli smaller than 2048 as a failure.
if smallest_modulus < 2048:
text = 'using small %d-bit modulus' % smallest_modulus
lst = SSH2_KexDB.ALGORITHMS['kex'][gex_alg]
lst = SSH2_KexDB.get_db()['kex'][gex_alg]
# For 'diffie-hellman-group-exchange-sha256', add
# a failure reason.
if len(lst) == 1:
@ -222,7 +222,7 @@ class GEXTest:
# Moduli smaller than 3072 get flagged as a warning.
elif smallest_modulus < 3072:
lst = SSH2_KexDB.ALGORITHMS['kex'][gex_alg]
lst = SSH2_KexDB.get_db()['kex'][gex_alg]
# Ensure that a warning list exists for us to append to, below.
while len(lst) < 3: