diff --git a/bin/.bin/webtest/verifySSL b/bin/.bin/webtest/verifySSL index fd0e5aa5..c9c5f3d0 100755 --- a/bin/.bin/webtest/verifySSL +++ b/bin/.bin/webtest/verifySSL @@ -22,6 +22,7 @@ print_help(){ list_vulnerabilites(){ echo "Beast" + echo "Sweet32" } check-beast(){ @@ -61,6 +62,16 @@ check-beast(){ } +check-sweet32(){ + local tmpfile="$(mktemp)" + echo "openssl s_client -cipher 3DES -connect ${host}:${port}" >> "$tmpfile" + echo "" | $openssl s_client -cipher 3DES -connect "${host}:${port}" >> "$tmpfile" 2>&1 + if [ "$?" -eq 0 ]; then + cat "$tmpfile" + fi + rm "$tmpfile" +} + while [ "$#" -gt 0 ]; do case "$1" in -p|--port) @@ -98,6 +109,9 @@ case "$(echo "$vulnerability" | tr '[:upper:]' '[:lower:]')" in beast) check-beast ;; + sweet32) + check-sweet32 + ;; *) die "Unknown vulnerability $vulnerability" ;;