Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Minor tweak to run_tls_fallback_scsv() 

Don't report "OK" if the server may be TLS 1.3-only or SSLv3-only, as one is very good and one is very bad.
This commit is contained in:
David Cooper 2019-12-18 10:17:55 -05:00
parent 3f25bcc6d4
commit a0b2fb5d56
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
testssl.sh
View File

@ -14833,7 +14833,7 @@ run_tls_fallback_scsv() {
# This could be a TLS 1.3 only server, an SSLv3 only server (if SSLv3 support cannot be tested),
# or a server that does not support SSLv3 or any TLS protocol. So, don't report a severity,
# since this could either be good or bad.
outln "No fallback possible, TLS 1.2, TLS 1.1, and TLS 1 not supported (OK)"
outln "No fallback possible, TLS 1.2, TLS 1.1, and TLS 1 not supported"
fileout "$jsonID" "INFO" "TLS 1.2, TLS 1.1, and TLS 1 not supported"
fi
return 0