Skip to content

Commit 692b9c9

Browse files
authored
Merge pull request #2710 from testssl/fix_2708_TLS_FALLBACK_SCSV
Set POODLE var when exiting run_ssl_poodle()
2 parents 70dacdf + e4bbd6b commit 692b9c9

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

testssl.sh

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17955,10 +17955,12 @@ run_ssl_poodle() {
1795517955
pr_bold " POODLE, SSL"; out " ($cve) "
1795617956

1795717957
if "$TLS13_ONLY" || [[ $(has_server_protocol ssl3) -eq 1 ]]; then
17958-
# one condition should normally suffice but we don't know when run_poddle() was called
17958+
# one condition should normally suffice but we don't know when run_poodle() was called
1795917959
pr_svrty_best "not vulnerable (OK)"
1796017960
outln ", no SSLv3 support"
1796117961
fileout "$jsonID" "OK" "not vulnerable, no SSLv3" "$cve" "$cwe"
17962+
# otherwise we'll get a non-zero return code and a message 'Rerun including POODLE SSL check' @ TLS_FALLBACK_SCSV, see #2708
17963+
POODLE=1
1796217964
return 0
1796317965
fi
1796417966

0 commit comments

Comments
 (0)