Skip to content

Commit 5a320df

Browse files
authored
Merge pull request #2711 from testssl/fix_2708_TLS_FALLBACK_SCSV_3.0
Set POODLE var when exiting run_ssl_poodle()
2 parents 8e55576 + 95d39fd commit 5a320df

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

testssl.sh

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15067,10 +15067,12 @@ run_ssl_poodle() {
1506715067
pr_bold " POODLE, SSL"; out " ($cve) "
1506815068

1506915069
if "$TLS13_ONLY" || [[ $(has_server_protocol ssl3) -eq 1 ]]; then
15070-
# one condition should normally suffice but we don't know when run_poddle() was called
15070+
# one condition should normally suffice but we don't know when run_poodle() was called
1507115071
pr_svrty_best "not vulnerable (OK)"
1507215072
outln ", no SSLv3 support"
1507315073
fileout "$jsonID" "OK" "not vulnerable, no SSLv3" "$cve" "$cwe"
15074+
# otherwise we'll get a non-zero return code + a warning 'Rerun including POODLE SSL check' @ TLS_FALLBACK_SCSV, see #2708
15075+
POODLE=1
1507415076
return 0
1507515077
fi
1507615078

0 commit comments

Comments
 (0)