From c272878c73d9e00f6559828c68e678548e1c5bb8 Mon Sep 17 00:00:00 2001
From: Dirk <dirk@testssl.sh>
Date: Tue, 3 Nov 2015 19:51:05 +0100
Subject: [PATCH] - warning session tickets -> PFS

---
 testssl.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/testssl.sh b/testssl.sh
index 26ec95d..5bd8858 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -2056,7 +2056,8 @@ run_server_defaults() {
      else
           lifetime=$(echo $sessticket_str | grep -a lifetime | sed 's/[A-Za-z:() ]//g')
           unit=$(echo $sessticket_str | grep -a lifetime | sed -e 's/^.*'"$lifetime"'//' -e 's/[ ()]//g')
-          outln "$lifetime $unit"
+          out "$lifetime $unit "
+          pr_yellowln "(PFS requires session ticket keys need to be rotated <= daily)"
      fi
  
      pr_bold " SSL Session ID support       "
@@ -5308,4 +5309,4 @@ fi
 exit $?
 
 
-#  $Id: testssl.sh,v 1.415 2015/11/03 12:13:09 dirkw Exp $
+#  $Id: testssl.sh,v 1.416 2015/11/03 18:51:04 dirkw Exp $