mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-01-03 23:39:45 +01:00
Better consistency (cipher coloring)
Especially for yellow=low the key exchange is considered to be equal now. That needs to be subject to reconsideration.
This commit is contained in:
parent
cf89488ab9
commit
f92d3988af
12
testssl.sh
12
testssl.sh
@ -4877,18 +4877,18 @@ pr_cipher_quality() {
|
||||
pr_svrty_high "$text"
|
||||
return 2
|
||||
;;
|
||||
*CBC*)
|
||||
pr_svrty_medium "$text"
|
||||
return 3
|
||||
;; # FIXME BEAST: We miss some CBC ciphers here, need to work w/ a list
|
||||
*GCM*|*CHACHA20*)
|
||||
pr_done_best "$text"
|
||||
return 7
|
||||
;; #best ones
|
||||
ECDHE*AES*)
|
||||
ECDHE*AES*|DHE*AES*SHA*|*CAMELLIA*SHA)
|
||||
pr_svrty_low "$text"
|
||||
return 4
|
||||
;; # it's CBC. --> lucky13
|
||||
*CBC*)
|
||||
pr_svrty_medium "$text"
|
||||
return 3
|
||||
;; # FIXME BEAST: We miss some CBC ciphers here, need to work w/ a list
|
||||
*)
|
||||
out "$text"
|
||||
return 5
|
||||
@ -4907,7 +4907,7 @@ pr_cipher_quality() {
|
||||
pr_svrty_high "$text"
|
||||
return 2
|
||||
;;
|
||||
*ECDHE*AES*CBC*)
|
||||
*ECDHE*AES*CBC*|*DHE*AES*SHA*|*RSA*AES*SHA*|*CAMELLIA*SHA*)
|
||||
pr_svrty_low "$text"
|
||||
return 4
|
||||
;;
|
||||
|
Loading…
Reference in New Issue
Block a user