We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents 8e55576 + 95d39fd commit 5a320dfCopy full SHA for 5a320df
testssl.sh
@@ -15067,10 +15067,12 @@ run_ssl_poodle() {
15067
pr_bold " POODLE, SSL"; out " ($cve) "
15068
15069
if "$TLS13_ONLY" || [[ $(has_server_protocol ssl3) -eq 1 ]]; then
15070
- # one condition should normally suffice but we don't know when run_poddle() was called
+ # one condition should normally suffice but we don't know when run_poodle() was called
15071
pr_svrty_best "not vulnerable (OK)"
15072
outln ", no SSLv3 support"
15073
fileout "$jsonID" "OK" "not vulnerable, no SSLv3" "$cve" "$cwe"
15074
+ # otherwise we'll get a non-zero return code + a warning 'Rerun including POODLE SSL check' @ TLS_FALLBACK_SCSV, see #2708
15075
+ POODLE=1
15076
return 0
15077
fi
15078
0 commit comments