From abc956344a2f56f69f6fdd5ff172f99039958d6a Mon Sep 17 00:00:00 2001
From: Dirk <dirk@testssl.sh>
Date: Tue, 27 Feb 2018 13:06:29 +0100
Subject: [PATCH] Address/FIX #876 (empty addcmd2 variable)

---
 testssl.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/testssl.sh b/testssl.sh
index 00230b2..93462a6 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -5223,6 +5223,7 @@ run_server_preference() {
           # workaround is to connect with a protocol
           debugme tm_out "(workaround #188) "
           determine_optimal_proto $STARTTLS_PROTOCOL
+          [[ ! "$STARTTLS_OPTIMAL_PROTO" =~ ssl ]] && addcmd2="$SNI"
           $OPENSSL s_client $(s_client_options "$STARTTLS $STARTTLS_OPTIMAL_PROTO -cipher $list_fwd $BUGS -connect $NODEIP:$PORT $PROXY $addcmd2") </dev/null 2>$ERRFILE >$TMPFILE
           if ! sclient_connect_successful $? $TMPFILE; then
                pr_warning "no matching cipher in this list found (pls report this): "