Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-10-30 21:35:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #551 from dcooper16/parse_sslv2_fix

Browse Source 
Don't parse SSLv2 ServerHello unless successful response
This commit is contained in:
Dirk Wetter
2016-12-13 12:28:26 +01:00
committed by GitHub
parent 156af69dc2 2a9668c000
commit 7f3b1de737
1 changed files with 14 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
testssl.sh
View File

@@ -6528,20 +6528,21 @@ parse_sslv2_serverhello() {
fi fi
fi fi
certificate_len=2*$(hex2dec "$v2_hello_cert_length") [[ "$2" == "true" ]] || return $ret
[[ -e $HOSTCERT ]] && rm $HOSTCERT rm -f $HOSTCERT $TEMPDIR/intermediatecerts.pem
[[ -e $TEMPDIR/intermediatecerts.pem ]] && rm $TEMPDIR/intermediatecerts.pem if [[ $ret -eq 3 ]]; then
if [[ "$2" == "true" ]] && [[ "$v2_cert_type" == "01" ]] && [[ "$v2_hello_cert_length" != "00" ]]; then certificate_len=2*$(hex2dec "$v2_hello_cert_length")
tmp_der_certfile=$(mktemp $TEMPDIR/der_cert.XXXXXX) || return $ret
asciihex_to_binary_file "${v2_hello_ascii:26:certificate_len}" "$tmp_der_certfile" if [[ "$v2_cert_type" == "01" ]] && [[ "$v2_hello_cert_length" != "00" ]]; then
$OPENSSL x509 -inform DER -in $tmp_der_certfile -outform PEM -out $HOSTCERT tmp_der_certfile=$(mktemp $TEMPDIR/der_cert.XXXXXX) || return $ret
rm $tmp_der_certfile asciihex_to_binary_file "${v2_hello_ascii:26:certificate_len}" "$tmp_der_certfile"
get_pub_key_size $OPENSSL x509 -inform DER -in $tmp_der_certfile -outform PEM -out $HOSTCERT
echo "======================================" >> $TMPFILE rm $tmp_der_certfile
fi get_pub_key_size
echo "======================================" >> $TMPFILE
fi
# Output list of supported ciphers # Output list of supported ciphers
if [[ "$2" == "true" ]]; then
let offset=26+$certificate_len let offset=26+$certificate_len
nr_ciphers_detected=$((V2_HELLO_CIPHERSPEC_LENGTH / 3)) nr_ciphers_detected=$((V2_HELLO_CIPHERSPEC_LENGTH / 3))
for (( i=0 ; i<nr_ciphers_detected; i++ )); do for (( i=0 ; i<nr_ciphers_detected; i++ )); do