LittleNellie/cipherscan
2
0
Fork 0
mirror of https://github.com/mozilla/cipherscan.git synced 2024-11-22 22:33:40 +01:00
Code Issues Releases Wiki Activity

make handling of self signed certs more robust

Browse Source 
openssl sometimes will print the filename, then the error, and finish
with OK, matching the colon and space prevents from considering such
certs to be valid
This commit is contained in:
Hubert Kario 2014-08-04 17:22:53 +02:00
parent 4c22d50f0c
commit 9f06829486
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cipherscan
View File

@ -230,7 +230,7 @@ test_cipher_on_target() {
local saved="False" local saved="False"
if ${OPENSSLBIN} verify "${trust_source[@]}" \ if ${OPENSSLBIN} verify "${trust_source[@]}" \
-untrusted <(echo "$tmp") <(echo "$cert") 2>/dev/null | \ -untrusted <(echo "$tmp") <(echo "$cert") 2>/dev/null | \
grep 'OK$' >/dev/null; then grep ': OK$' >/dev/null; then
# if the certificate is an intermediate CA it may be useful # if the certificate is an intermediate CA it may be useful
# for connecting to servers that are misconfigured so save it # for connecting to servers that are misconfigured so save it