mirror of
				https://github.com/drwetter/testssl.sh.git
				synced 2025-11-04 07:45:27 +01:00 
			
		
		
		
	FIX #795 awk had word match, didn't work and wasn't needed
If certicate was determined before running dorwn, we needed to remove "SHA256 " (regression)
This commit is contained in:
		@@ -10289,7 +10289,7 @@ run_drown() {
 | 
				
			|||||||
          [[ $? -eq 0 ]] && cert_fingerprint_sha2="$($OPENSSL x509 -noout -in $HOSTCERT -fingerprint -sha256 2>>$ERRFILE | sed -e 's/^.*Fingerprint=//' -e 's/://g' )"
 | 
					          [[ $? -eq 0 ]] && cert_fingerprint_sha2="$($OPENSSL x509 -noout -in $HOSTCERT -fingerprint -sha256 2>>$ERRFILE | sed -e 's/^.*Fingerprint=//' -e 's/://g' )"
 | 
				
			||||||
     else
 | 
					     else
 | 
				
			||||||
          cert_fingerprint_sha2="$RSA_CERT_FINGERPRINT_SHA2"
 | 
					          cert_fingerprint_sha2="$RSA_CERT_FINGERPRINT_SHA2"
 | 
				
			||||||
          # cert_fingerprint_sha2=${cert_fingerprint_sha2/SHA256 /}
 | 
					          cert_fingerprint_sha2=${cert_fingerprint_sha2/SHA256 /}
 | 
				
			||||||
     fi
 | 
					     fi
 | 
				
			||||||
 | 
					
 | 
				
			||||||
     sslv2_sockets
 | 
					     sslv2_sockets
 | 
				
			||||||
@@ -11416,7 +11416,7 @@ prepare_arrays() {
 | 
				
			|||||||
                    if [[ $OSSL_VER_MAJOR -lt 1 ]]; then
 | 
					                    if [[ $OSSL_VER_MAJOR -lt 1 ]]; then
 | 
				
			||||||
                         [[ ":${ossl_supported_tls}:" =~ ":${TLS_CIPHER_OSSL_NAME[i]}:" ]] && TLS_CIPHER_OSSL_SUPPORTED[i]=true
 | 
					                         [[ ":${ossl_supported_tls}:" =~ ":${TLS_CIPHER_OSSL_NAME[i]}:" ]] && TLS_CIPHER_OSSL_SUPPORTED[i]=true
 | 
				
			||||||
                    else
 | 
					                    else
 | 
				
			||||||
                         ossl_ciph="$(awk '/\<'"$hexc"'\>/ { print $3 }' <<< "$ossl_supported_tls")"
 | 
					                         ossl_ciph="$(awk '/'"$hexc"'/ { print $3 }' <<< "$ossl_supported_tls")"
 | 
				
			||||||
                         if [[ -n "$ossl_ciph" ]]; then
 | 
					                         if [[ -n "$ossl_ciph" ]]; then
 | 
				
			||||||
                              TLS_CIPHER_OSSL_SUPPORTED[i]=true
 | 
					                              TLS_CIPHER_OSSL_SUPPORTED[i]=true
 | 
				
			||||||
                              [[ "$ossl_ciph" != "${TLS_CIPHER_OSSL_NAME[i]}" ]] && TLS_CIPHER_OSSL_NAME[i]="$ossl_ciph"
 | 
					                              [[ "$ossl_ciph" != "${TLS_CIPHER_OSSL_NAME[i]}" ]] && TLS_CIPHER_OSSL_NAME[i]="$ossl_ciph"
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user