Skip to content

Commit 2b04823

Browse files
author
David Cooper
authored
Fix checks for whether X25519 and X448 are supported
In some cases OpenSSL returns an "unsupported" message rather than a "not found" message if X25519 and X448 are not supported. This commit changes the check for whether X5519 and X448 are supported for checking for either response.
1 parent b4274e8 commit 2b04823

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

testssl.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17256,8 +17256,8 @@ find_openssl_binary() {
1725617256
$OPENSSL s_client -tls1_3 </dev/null 2>&1 | grep -aiq "unknown option" || HAS_TLS13=true
1725717257
$OPENSSL s_client -no_ssl2 </dev/null 2>&1 | grep -aiq "unknown option" || HAS_NO_SSL2=true
1725817258

17259-
$OPENSSL genpkey -algorithm X448 2>&1 | grep -aq "not found" || HAS_X448=true
17260-
$OPENSSL genpkey -algorithm X25519 2>&1 | grep -aq "not found" || HAS_X25519=true
17259+
$OPENSSL genpkey -algorithm X448 2>&1 | grep -Eaq "not found|unsupported" || HAS_X448=true
17260+
$OPENSSL genpkey -algorithm X25519 2>&1 | grep -Eaq "not found|unsupported" || HAS_X25519=true
1726117261

1726217262
$OPENSSL pkey -help 2>&1 | grep -q Error || HAS_PKEY=true
1726317263
$OPENSSL pkeyutl 2>&1 | grep -q Error || HAS_PKUTIL=true

0 commit comments

Comments
 (0)