jab2870/Dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Bin: fixes the lucky13 check

Browse source 
It apparently works with any cbc cipher and doesn't require tls1
This commit is contained in:
Jonathan Hodgson 2021-02-13 20:11:16 +00:00
parent 343f510ad0
commit 865566dd04
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
bin/.bin/webtest/verifySSL
View file

@ -70,8 +70,8 @@ check-sweet32(){
check-lucky13(){
local tmpfile="$(mktemp)"
$openssl ciphers -v | grep -i cbc3 | cut -d' ' -f1 | while read cipher; do
echo "\$ openssl s_client -tls1 -cipher $cipher -connect ${host}:${port}" >> "$tmpfile"
$openssl ciphers -v | grep -i cbc | cut -d' ' -f1 | while read cipher; do
echo "\$ openssl s_client -cipher $cipher -connect ${host}:${port}" >> "$tmpfile"
echo "" | $openssl s_client -tls1 -cipher "$cipher" -connect "${host}:${port}" >> "$tmpfile" 2>&1
if [ "$?" -eq 0 ]; then
cat "$tmpfile"