mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-01-08 09:40:57 +01:00
Merge pull request #533 from dcooper16/more_fixes_for_no_cipher_mapping
More fixes for missing cipher mapping file
This commit is contained in:
commit
4f460f8dcd
@ -7102,7 +7102,8 @@ parse_tls_serverhello() {
|
|||||||
|
|
||||||
# Now parse the server key exchange message
|
# Now parse the server key exchange message
|
||||||
if [[ $tls_serverkeyexchange_ascii_len -ne 0 ]]; then
|
if [[ $tls_serverkeyexchange_ascii_len -ne 0 ]]; then
|
||||||
if [[ $rfc_cipher_suite =~ "TLS_ECDHE_" ]] || [[ $rfc_cipher_suite =~ "TLS_ECDH_anon" ]]; then
|
if [[ $rfc_cipher_suite =~ "TLS_ECDHE_" ]] || [[ $rfc_cipher_suite =~ "TLS_ECDH_anon" ]] || \
|
||||||
|
[[ $rfc_cipher_suite == ECDHE* ]] || [[ $rfc_cipher_suite == AECDH* ]]; then
|
||||||
if [[ $tls_serverkeyexchange_ascii_len -lt 6 ]]; then
|
if [[ $tls_serverkeyexchange_ascii_len -lt 6 ]]; then
|
||||||
debugme echo "Malformed ServerKeyExchange Handshake message in ServerHello."
|
debugme echo "Malformed ServerKeyExchange Handshake message in ServerHello."
|
||||||
tmpfile_handle $FUNCNAME.txt
|
tmpfile_handle $FUNCNAME.txt
|
||||||
@ -7153,7 +7154,9 @@ parse_tls_serverhello() {
|
|||||||
debugme echo "dh_bits: $named_curve_str, $dh_bits bits"
|
debugme echo "dh_bits: $named_curve_str, $dh_bits bits"
|
||||||
echo "Server Temp Key: $named_curve_str, $dh_bits bits" >> $TMPFILE
|
echo "Server Temp Key: $named_curve_str, $dh_bits bits" >> $TMPFILE
|
||||||
fi
|
fi
|
||||||
elif [[ $rfc_cipher_suite =~ "TLS_DHE_" ]] || [[ $rfc_cipher_suite =~ "TLS_DH_anon" ]]; then
|
elif [[ $rfc_cipher_suite =~ "TLS_DHE_" ]] || [[ $rfc_cipher_suite =~ "TLS_DH_anon" ]] || \
|
||||||
|
[[ $rfc_cipher_suite == "DHE-"* ]] || [[ $rfc_cipher_suite == "EDH-"* ]] || \
|
||||||
|
[[ $rfc_cipher_suite == "EXP1024-DHE-"* ]]; then
|
||||||
# For DH ephemeral keys the first field is p, and the length of
|
# For DH ephemeral keys the first field is p, and the length of
|
||||||
# p is the same as the length of the public key.
|
# p is the same as the length of the public key.
|
||||||
if [[ $tls_serverkeyexchange_ascii_len -lt 4 ]]; then
|
if [[ $tls_serverkeyexchange_ascii_len -lt 4 ]]; then
|
||||||
|
Loading…
Reference in New Issue
Block a user