LittleNellie/cipherscan
2
0
Fork 0
mirror of https://github.com/mozilla/cipherscan.git synced 2024-11-22 14:23:41 +01:00
Code Issues Releases Wiki Activity

Add warning if target is not fqdn and SNI needs to be disabled

Browse Source
This commit is contained in:
Julien Vehent 2015-09-18 15:58:31 -04:00
parent 5284dda0fb
commit 3131abb333
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cipherscan
View File

@ -1534,8 +1534,12 @@ SCLIENTARGS="${PARAMS[*]}"
# only append the SNI: # only append the SNI:
# if the target is a hostname by validating the tld # if the target is a hostname by validating the tld
# if -servername was not supplied by the user # if -servername was not supplied by the user
if [[ $SNI == "True" && $sni_target =~ \.[a-z]{1,20}$ && ! $SCLIENTARGS =~ servername ]]; then if [[ $SNI == "True" && ! $SCLIENTARGS =~ servername ]]; then
if [[ $sni_target =~ \.[a-zA-Z]{1,20}$ ]]; then
SCLIENTARGS="$SCLIENTARGS -servername $sni_target" SCLIENTARGS="$SCLIENTARGS -servername $sni_target"
else
echo "Warning: target is not a FQDN. SNI was disabled. Use a FQDN or '-servername <fqdn>'" 1>&2
fi
fi fi
debug "sclientargs: $SCLIENTARGS" debug "sclientargs: $SCLIENTARGS"