Merge pull request #1553 from dcooper16/pr_cipher_quality_gost

Handle GOST ciphers in pr_cipher_quality()
This commit is contained in:
Dirk Wetter 2020-04-02 13:53:28 +02:00 committed by GitHub
commit f16c7af687
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -5937,6 +5937,7 @@ pr_ecdh_curve_quality() {
pr_cipher_quality() { pr_cipher_quality() {
local cipher="$1" local cipher="$1"
local text="$2" local text="$2"
local ossl_cipher
[[ -z "$1" ]] && return 0 [[ -z "$1" ]] && return 0
[[ -z "$text" ]] && text="$cipher" [[ -z "$text" ]] && text="$cipher"
@ -5983,7 +5984,7 @@ pr_cipher_quality() {
pr_svrty_best "$text" pr_svrty_best "$text"
return 7 return 7
;; #best ones ;; #best ones
*AES*SHA*|*CAMELLIA*SHA*|*SEED*SHA*|*CBC*) *AES*SHA*|*CAMELLIA*SHA*|*SEED*SHA*|*CBC*|*GOST*)
pr_svrty_low "$text" pr_svrty_low "$text"
return 4 return 4
;; ;;
@ -5993,7 +5994,9 @@ pr_cipher_quality() {
;; ;;
esac esac
fi fi
ossl_cipher="$cipher"
cipher="$(openssl2rfc "$cipher")" cipher="$(openssl2rfc "$cipher")"
[[ -z "$cipher" ]] && cipher="$ossl_cipher"
fi fi
# Now we look at the RFC cipher names. The sequence matters - as above. # Now we look at the RFC cipher names. The sequence matters - as above.
@ -6018,7 +6021,7 @@ pr_cipher_quality() {
pr_svrty_medium "$text" pr_svrty_medium "$text"
return 3 return 3
;; ;;
*CBC*) *CBC*|*GOST*)
pr_svrty_low "$text" pr_svrty_low "$text"
return 4 return 4
;; ;;