Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

FIX #789

This commit is contained in:
Dirk Wetter 2017-08-30 12:24:13 +02:00
parent 5f2043eb02
commit 3e2d321e68
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
testssl.sh
View File

@ -10822,7 +10822,7 @@ run_lucky13() {
if [[ $VULN_COUNT -le $VULN_THRESHLD ]] || "$WIDE"; then if [[ $VULN_COUNT -le $VULN_THRESHLD ]] || "$WIDE"; then
outln outln
fi fi
pr_bold " LUCKY13"; out " ($cve) " pr_bold " LUCKY13"; out " ($cve), experimental "
"$SSL_NATIVE" && using_sockets=false "$SSL_NATIVE" && using_sockets=false
# The openssl binary distributed has almost everything we need (PSK, KRB5 ciphers and feff, ffe0 are typically missing). # The openssl binary distributed has almost everything we need (PSK, KRB5 ciphers and feff, ffe0 are typically missing).
@ -10841,8 +10841,11 @@ run_lucky13() {
[[ "$DEBUG" -eq 2 ]] && egrep -q "error|failure" $ERRFILE | egrep -av "unable to get local|verify error" [[ "$DEBUG" -eq 2 ]] && egrep -q "error|failure" $ERRFILE | egrep -av "unable to get local|verify error"
fi fi
if [[ $sclient_success -eq 0 ]]; then if [[ $sclient_success -eq 0 ]]; then
pr_svrty_low "VULNERABLE"; out ", uses cipher block chaining (CBC) ciphers" out "potentially "
fileout "lucky13" "LOW" "LUCKY13, uses cipher block chaining (CBC) ciphers" "$cve" "$cwe" "$hint" pr_svrty_low "VULNERABLE"; out ", uses cipher block chaining (CBC) ciphers with TLS"
fileout "lucky13" "LOW" "potentially vulnerable to LUCKY13, uses cipher block chaining (CBC) ciphers with TLS. Check patches" "$cve" "$cwe" "$hint"
# the CBC padding which led to timing differences during MAC processing has been solved in openssl (https://www.openssl.org/news/secadv/20130205.txt)
# and other software. However we can't tell with reasonable effort from the outside. Thus we still issue a warning and label it experimental
else else
pr_done_best "not vulnerable (OK)"; pr_done_best "not vulnerable (OK)";
if "$using_sockets"; then if "$using_sockets"; then