Git/testssl.sh
1
0 Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-10-28 12:01:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1924 from drwetter/fix_1915

Browse Source 
Fix redundant message (BREACH) when client certificate required
This commit is contained in:
Dirk Wetter authored and GitHub committed 2021-06-22 08:25:29 +02:00
2 parents f4bb1a20e2 28d9bc483d
commit 56dcbcdc15
1 file changed
+3 -2
Download Patch File Download Diff File Expand all files Collapse all files
testssl.sh
+3 -2
View File
@@ -16399,8 +16399,9 @@ run_breach() {
[[ $VULN_COUNT -le $VULN_THRESHLD ]] && outln && pr_headlineln " Testing for BREACH (HTTP compression) vulnerability " && outln
pr_bold " BREACH"; out " ($cve) "
if [[ "$CLIENT_AUTH" == required ]]; then
outln "cannot be tested (server side requires x509 authentication)"
fileout "$jsonID" "INFO" "was not tested, server side requires x509 authentication" "$cve" "$cwe"
prln_warning "client x509-based authentication prevents this from being tested"
fileout "$jsonID" "WARN" "client x509-based authentication prevents this from being tested" "$cve" "$cwe"
return 7
fi
[[ -z "$url" ]] && url="/"