Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-04-01 23:43:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

Set POODLE var when exiting run_ssl_poodle()

Browse Source 
... so that run_tls_fallback_scsv() doesn't exit with a warning.

This fixes #2708 .
This commit is contained in:
Dirk Wetter 2025-03-19 23:30:06 +01:00
parent a43261fc6f
commit e4bbd6b517
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
testssl.sh
View File

@ -17954,10 +17954,12 @@ run_ssl_poodle() {
pr_bold " POODLE, SSL"; out " ($cve) "
if "$TLS13_ONLY" || [[ $(has_server_protocol ssl3) -eq 1 ]]; then
# one condition should normally suffice but we don't know when run_poddle() was called
# one condition should normally suffice but we don't know when run_poodle() was called
pr_svrty_best "not vulnerable (OK)"
outln ", no SSLv3 support"
fileout "$jsonID" "OK" "not vulnerable, no SSLv3" "$cve" "$cwe"
# otherwise we'll get a non-zero return code and a message 'Rerun including POODLE SSL check' @ TLS_FALLBACK_SCSV, see #2708
POODLE=1
return 0
fi