We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents 70dacdf + e4bbd6b commit 692b9c9Copy full SHA for 692b9c9
1 file changed
testssl.sh
@@ -17955,10 +17955,12 @@ run_ssl_poodle() {
17955
pr_bold " POODLE, SSL"; out " ($cve) "
17956
17957
if "$TLS13_ONLY" || [[ $(has_server_protocol ssl3) -eq 1 ]]; then
17958
- # one condition should normally suffice but we don't know when run_poddle() was called
+ # one condition should normally suffice but we don't know when run_poodle() was called
17959
pr_svrty_best "not vulnerable (OK)"
17960
outln ", no SSLv3 support"
17961
fileout "$jsonID" "OK" "not vulnerable, no SSLv3" "$cve" "$cwe"
17962
+ # otherwise we'll get a non-zero return code and a message 'Rerun including POODLE SSL check' @ TLS_FALLBACK_SCSV, see #2708
17963
+ POODLE=1
17964
return 0
17965
fi
17966
0 commit comments