mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-01-06 00:39:44 +01:00
Better consistency (cipher coloring)
Especially for yellow=low the key exchange is considered to be equal now. That needs to be subject to reconsideration.
This commit is contained in:
parent
cf89488ab9
commit
f92d3988af
12
testssl.sh
12
testssl.sh
@ -4877,18 +4877,18 @@ pr_cipher_quality() {
|
|||||||
pr_svrty_high "$text"
|
pr_svrty_high "$text"
|
||||||
return 2
|
return 2
|
||||||
;;
|
;;
|
||||||
*CBC*)
|
|
||||||
pr_svrty_medium "$text"
|
|
||||||
return 3
|
|
||||||
;; # FIXME BEAST: We miss some CBC ciphers here, need to work w/ a list
|
|
||||||
*GCM*|*CHACHA20*)
|
*GCM*|*CHACHA20*)
|
||||||
pr_done_best "$text"
|
pr_done_best "$text"
|
||||||
return 7
|
return 7
|
||||||
;; #best ones
|
;; #best ones
|
||||||
ECDHE*AES*)
|
ECDHE*AES*|DHE*AES*SHA*|*CAMELLIA*SHA)
|
||||||
pr_svrty_low "$text"
|
pr_svrty_low "$text"
|
||||||
return 4
|
return 4
|
||||||
;; # it's CBC. --> lucky13
|
;; # it's CBC. --> lucky13
|
||||||
|
*CBC*)
|
||||||
|
pr_svrty_medium "$text"
|
||||||
|
return 3
|
||||||
|
;; # FIXME BEAST: We miss some CBC ciphers here, need to work w/ a list
|
||||||
*)
|
*)
|
||||||
out "$text"
|
out "$text"
|
||||||
return 5
|
return 5
|
||||||
@ -4907,7 +4907,7 @@ pr_cipher_quality() {
|
|||||||
pr_svrty_high "$text"
|
pr_svrty_high "$text"
|
||||||
return 2
|
return 2
|
||||||
;;
|
;;
|
||||||
*ECDHE*AES*CBC*)
|
*ECDHE*AES*CBC*|*DHE*AES*SHA*|*RSA*AES*SHA*|*CAMELLIA*SHA*)
|
||||||
pr_svrty_low "$text"
|
pr_svrty_low "$text"
|
||||||
return 4
|
return 4
|
||||||
;;
|
;;
|
||||||
|
Loading…
Reference in New Issue
Block a user