Skip to content

Commit 02a3c2c

Browse files
author
Emmanuel Fusté
committed
Fixed regression in printing results
And improve it with the effective number of renego before disconnection as it is now tracked.
1 parent ad04a90 commit 02a3c2c

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

testssl.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17095,15 +17095,15 @@ run_renego() {
1709517095
rm -f $TEMPDIR/was_killed
1709617096
else
1709717097
# If we got less than 2/3 successful attempts during the loop with 1s pause, we are in presence of exponential backoff.
17098-
if [[ $loop_reneg -le $(($ssl_reneg_attempts*2/3)) ]]; then
17098+
if [[ $tmp_result -eq 0 ]] && [[ $loop_reneg -le $(($ssl_reneg_attempts*2/3)) ]]; then
1709917099
tmp_result=2
1710017100
fi
1710117101
fi
1710217102
case $tmp_result in
1710317103
0) pr_svrty_high "VULNERABLE (NOT ok)"; outln ", DoS threat ($ssl_reneg_attempts attempts)"
1710417104
fileout "$jsonID" "HIGH" "VULNERABLE, DoS threat" "$cve" "$cwe" "$hint"
1710517105
;;
17106-
1) pr_svrty_good "not vulnerable (OK)"; outln " -- mitigated (disconnect within $ssl_reneg_attempts)"
17106+
1) pr_svrty_good "not vulnerable (OK)"; outln " -- mitigated (disconnect after $loop_reneg/$ssl_reneg_attempts attemps)"
1710717107
fileout "$jsonID" "OK" "not vulnerable, mitigated" "$cve" "$cwe"
1710817108
;;
1710917109
2) pr_svrty_good "not vulnerable (OK)"; \

0 commit comments

Comments
 (0)