Merge pull request #1534 from drwetter/breach_output3

Fix output for BEAST when no SSL3 or TLS
This commit is contained in:
Dirk Wetter 2020-03-07 12:15:55 +01:00 committed by GitHub
commit 4601670bac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -15608,7 +15608,7 @@ run_beast(){
if [[ $sclient_success -ne 0 ]]; then # protocol supported?
if "$continued"; then # second round: we hit TLS1
if "$HAS_SSL3" || "$using_sockets"; then
pr_svrty_good "not vulnerable (OK)" ; out ", no SSL3 or TLS1"
pr_svrty_good "not vulnerable (OK)" ; outln ", no SSL3 or TLS1"
fileout "$jsonID" "OK" "not vulnerable, no SSL3 or TLS1" "$cve" "$cwe"
else
prln_svrty_good "no TLS1 (OK)"