Sloppy try to address in the worst cases of wrong coloring of ciphers

See pending PR #905 / issue #333.

There's still lots of work needed and probably the function
needs to be completely rewritten and to be in sync with
other parts of the program.
This commit is contained in:
Dirk 2017-12-04 21:06:47 +01:00
parent 0c779d1684
commit 7f6ff5db3b

View File

@ -4828,11 +4828,11 @@ pr_cipher_quality() {
if [[ $TLS_NR_CIPHERS -eq 0 ]]; then
# We have the OpenSSL name and can't convert it to the RFC name
case "$cipher" in
*NULL*|*EXP*)
*NULL*|*EXP*|ADH*)
pr_svrty_critical "$text"
return 1
;;
*RC4*)
*RC4*|*RC2*)
pr_svrty_high "$text"
return 2
;;
@ -4858,11 +4858,11 @@ pr_cipher_quality() {
fi
case "$cipher" in
*NULL*|*EXP*|*RC2*|*_DES_*|*_DES40_*)
*NULL*|*EXP*|*RC2*|*_DES_*|*_DES40_*|*anon*)
pr_svrty_critical "$text"
return 1
;;
*RC4*)
*RC4*|*RC2*)
pr_svrty_high "$text"
return 2
;;