Modify pr_cipher_quality to handle ARIA

This commit fixes the way pr_cipher_quality handles the OpenSSL names of some ARIA ciphers that either provide no authentication or that use CBC padding.
This commit is contained in:
David Cooper 2020-03-25 15:57:00 -04:00
parent d177a90bbe
commit e15aea4790

View File

@ -5948,7 +5948,7 @@ pr_cipher_quality() {
# We have an OpenSSL name and can't convert it to the RFC name which is rarely # We have an OpenSSL name and can't convert it to the RFC name which is rarely
# the case, see "prepare_arrays()" and "./etc/cipher-mapping.txt" # the case, see "prepare_arrays()" and "./etc/cipher-mapping.txt"
case "$cipher" in case "$cipher" in
*NULL*|EXP*|ADH*|AECDH*) *NULL*|EXP*|ADH*|AECDH*|*anon*)
pr_svrty_critical "$text" pr_svrty_critical "$text"
return 1 return 1
;; ;;
@ -5983,7 +5983,7 @@ pr_cipher_quality() {
pr_svrty_best "$text" pr_svrty_best "$text"
return 7 return 7
;; #best ones ;; #best ones
*AES*SHA*|*CAMELLIA*SHA*|*SEED*SHA*) *AES*SHA*|*CAMELLIA*SHA*|*SEED*SHA*|*CBC*)
pr_svrty_low "$text" pr_svrty_low "$text"
return 4 return 4
;; ;;