Merge pull request #2385 from drwetter/hide_fast

Hide --fast option in help() and issue a warning when it's used
This commit is contained in:
Dirk Wetter 2023-08-28 18:26:36 +02:00 committed by GitHub
commit c55207d45c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -20349,7 +20349,6 @@ single check as <options> ("$PROG_NAME URI" does everything except -E and -g):
-4, --rc4, --appelbaum which RC4 ciphers are being offered?
tuning / connect options (most also can be preset via environment variables):
--fast omits some checks: using openssl for all ciphers (-e), show only first preferred cipher.
-9, --full includes tests for implementation bugs and cipher per protocol (could disappear)
--bugs enables the "-bugs" option of s_client, needed e.g. for some buggy F5s
--assume-http if protocol check fails it assumes HTTP protocol and enforces HTTP checks
@ -23725,6 +23724,8 @@ parse_cmd_line() {
grep -q 'BEGIN CERTIFICATE' "$fname" || fatal "\"$fname\" is not CA file in PEM format" $ERR_RESOURCE
done
"$FAST" && pr_warning "\n'--fast' can have some undesired side effects thus it is not recommended to use anymore\n"
if "$do_starttls_injection" && [[ "$STARTTLS_PROTOCOL" =~ smtp ]]; then
((VULN_COUNT++))
fi