diff --git a/testssl.sh b/testssl.sh index 531164f..1b1cd43 100755 --- a/testssl.sh +++ b/testssl.sh @@ -584,38 +584,30 @@ neat_list(){ test_just_one(){ - ciph="" - for arg in $@; do - $OPENSSL ciphers -V 'ALL:COMPLEMENTOFALL:@STRENGTH' | while read hexcode dash ciph restofline; do - normalize_ciphercode $hexcode - grep arg - done - done - + # erstmal überprüfen, ob openssl den cipher überhaupt hat | oder per socket neat_header + for arg in `echo $@ | sed 's/,/ /g'`; do + $OPENSSL ciphers -V 'ALL:COMPLEMENTOFALL:@STRENGTH' | while read hexcode dash ciph sslvers kx auth enc mac export ; do + normalize_ciphercode $hexcode + neat_list $HEXC $ciph $kx $enc | strings | grep -qwai "$arg" # -w doesn't work yest for cipher strings --> column positioning + if [ $? -eq 0 ]; then + $OPENSSL s_client -cipher $ciph $STARTTLS -connect $NODEIP:$PORT $SNI &>$TMPFILE $TMPFILE