Skip to content

Commit 95d39fd

Browse files
committed
Set POODLE var when exiting run_ssl_poodle()
... so that run_tls_fallback_scsv() doesn't exit with a warning. This fixes #2708 . This is for 3.0 . For 3.2 see #2710
1 parent 8e55576 commit 95d39fd

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

testssl.sh

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15067,10 +15067,12 @@ run_ssl_poodle() {
1506715067
pr_bold " POODLE, SSL"; out " ($cve) "
1506815068

1506915069
if "$TLS13_ONLY" || [[ $(has_server_protocol ssl3) -eq 1 ]]; then
15070-
# one condition should normally suffice but we don't know when run_poddle() was called
15070+
# one condition should normally suffice but we don't know when run_poodle() was called
1507115071
pr_svrty_best "not vulnerable (OK)"
1507215072
outln ", no SSLv3 support"
1507315073
fileout "$jsonID" "OK" "not vulnerable, no SSLv3" "$cve" "$cwe"
15074+
# otherwise we'll get a non-zero return code + a warning 'Rerun including POODLE SSL check' @ TLS_FALLBACK_SCSV, see #2708
15075+
POODLE=1
1507415076
return 0
1507515077
fi
1507615078

0 commit comments

Comments
 (0)