Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2024-12-29 12:59:44 +01:00
Code Issues Packages Projects Releases Wiki Activity

Don't test for certificate compression if --ssl-native

Browse Source 
This commit changes run_server_defaults() so that the test for certificate compression is not run in --ssl-native mode. This fixes an issue that was caught by 21_baseline_starttls.t.
This commit is contained in:
David Cooper 2021-08-05 10:37:37 -04:00
parent fa1ccdb565
commit 526d25bc1d
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
testssl.sh
View File

@ -9543,7 +9543,7 @@ run_server_defaults() {
local -a ciphers_to_test certificate_type
local -a -i success
local cn_nosni cn_sni sans_nosni sans_sni san tls_extensions client_auth_ca
local cert_compression_methods
local cert_compression_methods=""
local using_sockets=true
"$SSL_NATIVE" && using_sockets=false
@ -9751,7 +9751,7 @@ run_server_defaults() {
done
determine_tls_extensions
cert_compression_methods="$(determine_cert_compression)"
"$using_sockets" && cert_compression_methods="$(determine_cert_compression)"
[[ -n "$cert_compression_methods" ]] && [[ "$cert_compression_methods" != "none" ]] && \
extract_new_tls_extensions "$TEMPDIR/$NODEIP.determine_cert_compression.txt"
@ -9895,7 +9895,11 @@ run_server_defaults() {
tls_time
jsonID="cert_compression"
if [[ $(has_server_protocol "tls1_3") -eq 0 ]]; then
if ! "$using_sockets"; then
# At the moment support for certificate compression can only be
# tested using tls_sockets().
:
elif [[ $(has_server_protocol "tls1_3") -eq 0 ]]; then
jsonID="certificate_compression"
pr_bold " Certificate Compression "
outln "$cert_compression_methods"