Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-03-04 04:21:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

Avoid subshell overhead

Browse Source 
This commit removes the use of parenthesis in two expressions in run_fs() in order to avoid subshell overhead.
This commit is contained in:
David Cooper 2025-02-26 13:25:49 -08:00 committed by GitHub
parent 102e4fb9b7
commit c38f46880f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
testssl.sh
View File

@ -10929,7 +10929,7 @@ run_fs() {
# Versions of TLS prior to 1.3 close the connection if the client does not support the curve # Versions of TLS prior to 1.3 close the connection if the client does not support the curve
# used in the certificate. The easiest solution is to move the curves to the end of the list. # used in the certificate. The easiest solution is to move the curves to the end of the list.
# instead of removing them from the ClientHello. This is only needed if there is no RSA certificate. # instead of removing them from the ClientHello. This is only needed if there is no RSA certificate.
if (! "$HAS_TLS13" || [[ "$proto" == "-no_tls1_3" ]]) && [[ ! "$ecdhe_cipher_list" == *RSA* ]]; then if { ! "$HAS_TLS13" || [[ "$proto" == "-no_tls1_3" ]]; } && [[ ! "$ecdhe_cipher_list" == *RSA* ]]; then
while true; do while true; do
curves_to_test="" curves_to_test=""
for (( i=low; i < high; i++ )); do for (( i=low; i < high; i++ )); do
@ -10999,7 +10999,7 @@ run_fs() {
# Versions of TLS prior to 1.3 close the connection if the client does not support the curve # Versions of TLS prior to 1.3 close the connection if the client does not support the curve
# used in the certificate. The easiest solution is to move the curves to the end of the list. # used in the certificate. The easiest solution is to move the curves to the end of the list.
# instead of removing them from the ClientHello. This is only needed if there is no RSA certificate. # instead of removing them from the ClientHello. This is only needed if there is no RSA certificate.
if ([[ "$proto" == 03 ]] && [[ ! "$ecdhe_cipher_list" == *RSA* ]]); then if [[ "$proto" == 03 ]] && [[ ! "$ecdhe_cipher_list" == *RSA* ]]; then
while true; do while true; do
curves_to_test="" curves_to_test=""
for (( i=0; i < nr_curves; i++ )); do for (( i=0; i < nr_curves; i++ )); do