Skip to content

Commit f7b29ca

Browse files
authored
Merge pull request #1916 from drwetter/fix_1915_3.0
Fix indentation and redundant message (BREACH) when client certificate required
2 parents 96e8f67 + 19feed1 commit f7b29ca

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

testssl.sh

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14614,8 +14614,9 @@ run_breach() {
1461414614
[[ $VULN_COUNT -le $VULN_THRESHLD ]] && outln && pr_headlineln " Testing for BREACH (HTTP compression) vulnerability " && outln
1461514615
pr_bold " BREACH"; out " ($cve) "
1461614616
if "$CLIENT_AUTH"; then
14617-
outln "cannot be tested (server side requires x509 authentication)"
14618-
fileout "$jsonID" "INFO" "was not tested, server side requires x509 authentication" "$cve" "$cwe"
14617+
prln_warning "client x509-based authentication prevents this from being tested"
14618+
fileout "$jsonID" "WARN" "client x509-based authentication prevents this from being tested" "$cve" "$cwe"
14619+
return 7
1461914620
fi
1462014621

1462114622
# if [[ $NR_HEADER_FAIL -ge $MAX_HEADER_FAIL ]]; then

0 commit comments

Comments
 (0)