Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-01-07 17:20:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

Introduce property global HAS_PKUTIL

Browse Source
This commit is contained in:
Dirk 2017-12-12 19:37:33 +01:00
parent 8f597f7077
commit f829878a43
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
testssl.sh
View File

@ -275,6 +275,7 @@ HAS_DH_BITS=${HAS_DH_BITS:-false} # initialize openssl variables
HAS_SSL2=false HAS_SSL2=false
HAS_SSL3=false HAS_SSL3=false
HAS_TLS13=false HAS_TLS13=false
HAS_PKUTIL=false
HAS_NO_SSL2=false HAS_NO_SSL2=false
HAS_NOSERVERNAME=false HAS_NOSERVERNAME=false
HAS_ALPN=false HAS_ALPN=false
@ -12899,6 +12900,12 @@ run_robot() {
[[ $VULN_COUNT -le $VULN_THRESHLD ]] && outln && pr_headlineln " Testing for Return of Bleichenbacher's Oracle Threat (ROBOT) vulnerability " && outln [[ $VULN_COUNT -le $VULN_THRESHLD ]] && outln && pr_headlineln " Testing for Return of Bleichenbacher's Oracle Threat (ROBOT) vulnerability " && outln
pr_bold " ROBOT " pr_bold " ROBOT "
if [[ ! "$HAS_PKUTIL" ]]; then
prln_local_problem "Your $OPENSSL does not support the pkeyutl utility."
fileout "ROBOT" "WARN" "Your $OPENSSL does not support the pkeyutl utility."
return 7
fi
if [[ 0 -eq $(has_server_protocol tls1_2) ]]; then if [[ 0 -eq $(has_server_protocol tls1_2) ]]; then
tls_hexcode="03" tls_hexcode="03"
elif [[ 0 -eq $(has_server_protocol tls1_1) ]]; then elif [[ 0 -eq $(has_server_protocol tls1_1) ]]; then
@ -13006,8 +13013,8 @@ run_robot() {
socksend ",x15, x03, x01, x00, x02, x02, x00" 0 socksend ",x15, x03, x01, x00, x02, x02, x00" 0
fi fi
close_socket close_socket
prln_local_problem "Your $OPENSSL does not support the pkeyutl utility." prln_fixme "Conversion of public key failed around line $((LINENO - 9))"
fileout "ROBOT" "WARN" "Your $OPENSSL does not support the pkeyutl utility." fileout "ROBOT" "WARN" "Conversion of public key failed around line $((LINENO - 10)) "
return 1 return 1
fi fi
@ -13301,6 +13308,9 @@ find_openssl_binary() {
$OPENSSL s_client -noservername -connect x 2>&1 | grep -aq "unknown option" || \ $OPENSSL s_client -noservername -connect x 2>&1 | grep -aq "unknown option" || \
HAS_NOSERVERNAME=true HAS_NOSERVERNAME=true
$OPENSSL pkeyutl 2>&1 | grep -q Error || \
HAS_PKUTIL=true
$OPENSSL s_client -help 2>$s_client_has $OPENSSL s_client -help 2>$s_client_has
$OPENSSL s_client -starttls foo 2>$s_client_starttls_has $OPENSSL s_client -starttls foo 2>$s_client_starttls_has