We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent a43261f commit e4bbd6bCopy full SHA for e4bbd6b
1 file changed
testssl.sh
@@ -17954,10 +17954,12 @@ run_ssl_poodle() {
17954
pr_bold " POODLE, SSL"; out " ($cve) "
17955
17956
if "$TLS13_ONLY" || [[ $(has_server_protocol ssl3) -eq 1 ]]; then
17957
- # one condition should normally suffice but we don't know when run_poddle() was called
+ # one condition should normally suffice but we don't know when run_poodle() was called
17958
pr_svrty_best "not vulnerable (OK)"
17959
outln ", no SSLv3 support"
17960
fileout "$jsonID" "OK" "not vulnerable, no SSLv3" "$cve" "$cwe"
17961
+ # otherwise we'll get a non-zero return code and a message 'Rerun including POODLE SSL check' @ TLS_FALLBACK_SCSV, see #2708
17962
+ POODLE=1
17963
return 0
17964
fi
17965
0 commit comments