Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-10-31 13:55:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2673 from dcooper16/avoid_subshell

Browse Source 
Avoid subshell overhead
This commit is contained in:
Dirk Wetter
2025-02-27 10:31:04 +01:00
committed by GitHub
parent 78dd0a13c9 c38f46880f
commit c9d1ba4fcc
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
testssl.sh
View File

@@ -10931,7 +10931,7 @@ run_fs() {
# Versions of TLS prior to 1.3 close the connection if the client does not support the curve # Versions of TLS prior to 1.3 close the connection if the client does not support the curve
# used in the certificate. The easiest solution is to move the curves to the end of the list. # used in the certificate. The easiest solution is to move the curves to the end of the list.
# instead of removing them from the ClientHello. This is only needed if there is no RSA certificate. # instead of removing them from the ClientHello. This is only needed if there is no RSA certificate.
if (! "$HAS_TLS13" || [[ "$proto" == "-no_tls1_3" ]]) && [[ ! "$ecdhe_cipher_list" == *RSA* ]]; then if { ! "$HAS_TLS13" || [[ "$proto" == "-no_tls1_3" ]]; } && [[ ! "$ecdhe_cipher_list" == *RSA* ]]; then
while true; do while true; do
curves_to_test="" curves_to_test=""
for (( i=low; i < high; i++ )); do for (( i=low; i < high; i++ )); do
@@ -11001,7 +11001,7 @@ run_fs() {
# Versions of TLS prior to 1.3 close the connection if the client does not support the curve # Versions of TLS prior to 1.3 close the connection if the client does not support the curve
# used in the certificate. The easiest solution is to move the curves to the end of the list. # used in the certificate. The easiest solution is to move the curves to the end of the list.
# instead of removing them from the ClientHello. This is only needed if there is no RSA certificate. # instead of removing them from the ClientHello. This is only needed if there is no RSA certificate.
if ([[ "$proto" == 03 ]] && [[ ! "$ecdhe_cipher_list" == *RSA* ]]); then if [[ "$proto" == 03 ]] && [[ ! "$ecdhe_cipher_list" == *RSA* ]]; then
while true; do while true; do
curves_to_test="" curves_to_test=""
for (( i=0; i < nr_curves; i++ )); do for (( i=0; i < nr_curves; i++ )); do