Skip to content

Commit c55207d

Browse files
authored
Merge pull request #2385 from drwetter/hide_fast
Hide --fast option in help() and issue a warning when it's used
2 parents fc0aeaa + 0fcddff commit c55207d

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

testssl.sh

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20349,7 +20349,6 @@ single check as <options> ("$PROG_NAME URI" does everything except -E and -g):
2034920349
-4, --rc4, --appelbaum which RC4 ciphers are being offered?
2035020350

2035120351
tuning / connect options (most also can be preset via environment variables):
20352-
--fast omits some checks: using openssl for all ciphers (-e), show only first preferred cipher.
2035320352
-9, --full includes tests for implementation bugs and cipher per protocol (could disappear)
2035420353
--bugs enables the "-bugs" option of s_client, needed e.g. for some buggy F5s
2035520354
--assume-http if protocol check fails it assumes HTTP protocol and enforces HTTP checks
@@ -23725,6 +23724,8 @@ parse_cmd_line() {
2372523724
grep -q 'BEGIN CERTIFICATE' "$fname" || fatal "\"$fname\" is not CA file in PEM format" $ERR_RESOURCE
2372623725
done
2372723726

23727+
"$FAST" && pr_warning "\n'--fast' can have some undesired side effects thus it is not recommended to use anymore\n"
23728+
2372823729
if "$do_starttls_injection" && [[ "$STARTTLS_PROTOCOL" =~ smtp ]]; then
2372923730
((VULN_COUNT++))
2373023731
fi

0 commit comments

Comments
 (0)