We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 96e8f67 commit 19feed1Copy full SHA for 19feed1
1 file changed
testssl.sh
@@ -14614,8 +14614,9 @@ run_breach() {
14614
[[ $VULN_COUNT -le $VULN_THRESHLD ]] && outln && pr_headlineln " Testing for BREACH (HTTP compression) vulnerability " && outln
14615
pr_bold " BREACH"; out " ($cve) "
14616
if "$CLIENT_AUTH"; then
14617
- outln "cannot be tested (server side requires x509 authentication)"
14618
- fileout "$jsonID" "INFO" "was not tested, server side requires x509 authentication" "$cve" "$cwe"
+ prln_warning "client x509-based authentication prevents this from being tested"
+ fileout "$jsonID" "WARN" "client x509-based authentication prevents this from being tested" "$cve" "$cwe"
14619
+ return 7
14620
fi
14621
14622
# if [[ $NR_HEADER_FAIL -ge $MAX_HEADER_FAIL ]]; then
0 commit comments