1
0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-07-20 12:41:44 +02:00

Merge pull request from dcooper16/dont_test_unsupported_tls11

Don't run TLSv1.1 tests if server doesn't support TLSv1.1
This commit is contained in:
Dirk Wetter
2018-11-29 10:12:08 +01:00
committed by GitHub

@ -8153,7 +8153,8 @@ run_server_defaults() {
# try again, but only with TLSv1.1 and without SNI. # try again, but only with TLSv1.1 and without SNI.
if [[ $n -ge 10 ]]; then if [[ $n -ge 10 ]]; then
ciphers_to_test[n]="" ciphers_to_test[n]=""
[[ ${success[n-9]} -eq 0 ]] && ciphers_to_test[n]="${ciphers_to_test[n-9]}" && certificate_type[n]="${certificate_type[n-9]}" [[ ${success[n-9]} -eq 0 ]] && [[ $(has_server_protocol "tls1_1") -ne 1 ]] && \
ciphers_to_test[n]="${ciphers_to_test[n-9]}" && certificate_type[n]="${certificate_type[n-9]}"
fi fi
if [[ -n "${ciphers_to_test[n]}" ]] && \ if [[ -n "${ciphers_to_test[n]}" ]] && \