Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authord4t4king <dataking@gmail.com>2014-10-09 02:04:29 +0400
committerd4t4king <dataking@gmail.com>2014-10-09 02:04:29 +0400
commit111097506fddf5ae6257f8f84d6e27ed857b8040 (patch)
tree0b1fea322e3a3b4f8ec9ac6fad753773a2bd76b3 /include/tests_webservers
parent3d0fb8d529e69d6325742c098d7283a7d7e74e2d (diff)
Tweaked nginx protocol check so it actually works. Added insecure protocol detection.
Diffstat (limited to 'include/tests_webservers')
-rw-r--r--include/tests_webservers6
1 files changed, 6 insertions, 0 deletions
diff --git a/include/tests_webservers b/include/tests_webservers
index cc7b8bf1..df1086a4 100644
--- a/include/tests_webservers
+++ b/include/tests_webservers
@@ -501,6 +501,12 @@
if [ ${NGINX_SSL_PROTOCOLS} -eq 1 ]; then
Display --indent 8 --text "- Protocols configured" --result "YES" --color GREEN
+ FIND=`${GREPBINARY} "ssl_protocols" ${NGINX_CONF_LOCATION} | ${GREPBINARY} "SSLv[12]"`
+ if [ "${FIND}" = "" ]; then
+ Display --indent 10 --text "- Insecure protocols found" --result "NO" --color GREEN
+ else
+ Display --indent 10 --text "- Insecure protocols found" --result "YES" --color RED
+ fi
else
Display --indent 8 --text "- Protocols configured" --result "NO" --color RED
NGINX_SSL_SUGGESTION=1