Skip to content

Commit 892e95a

Browse files
committed
Rephrase Lucky13 finding for 3.2
see also #2537 .
1 parent 559c089 commit 892e95a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

testssl.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19608,8 +19608,8 @@ run_lucky13() {
1960819608
fi
1960919609
if [[ $sclient_success -eq 0 ]]; then
1961019610
out "potentially "
19611-
pr_svrty_low "VULNERABLE"; out ", uses cipher block chaining (CBC) ciphers with TLS. Check patches"
19612-
fileout "$jsonID" "LOW" "potentially vulnerable, uses TLS CBC ciphers" "$cve" "$cwe" "$hint"
19611+
pr_svrty_low "VULNERABLE"; out ", uses obsolete cipher block chaining ciphers with TLS, see server prefs."
19612+
fileout "$jsonID" "LOW" "potentially vulnerable, uses obsolete TLS CBC ciphers" "$cve" "$cwe" "$hint"
1961319613
# the CBC padding which led to timing differences during MAC processing has been solved in openssl (https://www.openssl.org/news/secadv/20130205.txt)
1961419614
# and other software. However we can't tell with reasonable effort from the outside. Thus we still issue a warning and label it experimental
1961519615
else

0 commit comments

Comments
 (0)