Fix known DH but not weak keys to be capped @ A not B

This commit is contained in:
Dirk Wetter 2020-04-22 14:08:58 +02:00
parent 7da2e90083
commit d6a9360f2c

View File

@ -16675,7 +16675,7 @@ run_logjam() {
else else
if [[ $subret -eq 1 ]]; then if [[ $subret -eq 1 ]]; then
out_common_prime "$jsonID2" "$cve" "$cwe" out_common_prime "$jsonID2" "$cve" "$cwe"
set_grade_cap "B" "Uses weak DH key exchange parameters (vulnerable to LOGJAM)" set_grade_cap "A" "Uses known DH key exchange parameters"
if ! "$openssl_no_expdhciphers"; then if ! "$openssl_no_expdhciphers"; then
outln "," outln ","
out "${spaces}but no DH EXPORT ciphers${addtl_warning}" out "${spaces}but no DH EXPORT ciphers${addtl_warning}"