diff options
| author | Michael Boelen <michael@cisofy.com> | 2014-10-09 02:16:44 +0400 |
|---|---|---|
| committer | Michael Boelen <michael@cisofy.com> | 2014-10-09 02:16:44 +0400 |
| commit | 1586332342d08c3a39b3fb684dc9ca88061dbfc3 (patch) | |
| tree | 0b1fea322e3a3b4f8ec9ac6fad753773a2bd76b3 /include | |
| parent | 3d0fb8d529e69d6325742c098d7283a7d7e74e2d (diff) | |
| parent | 111097506fddf5ae6257f8f84d6e27ed857b8040 (diff) | |
Merge pull request #17 from d4t4king/master
Tweaked nginx protocol check so it actually works. Added insecure prototocols.
Diffstat (limited to 'include')
| -rw-r--r-- | include/functions | 1 | ||||
| -rw-r--r-- | include/tests_webservers | 6 |
2 files changed, 7 insertions, 0 deletions
diff --git a/include/functions b/include/functions index df24633c..21736f71 100644 --- a/include/functions +++ b/include/functions @@ -824,6 +824,7 @@ if [ "${VALUE}" = "on" ]; then NGINX_SSL_PREFER_SERVER_CIPHERS=1; fi ;; ssl_protocols) + NGINX_SSL_PROTOCOLS=1 ;; ssl_session_cache) ;; diff --git a/include/tests_webservers b/include/tests_webservers index cc7b8bf1..df1086a4 100644 --- a/include/tests_webservers +++ b/include/tests_webservers @@ -501,6 +501,12 @@ if [ ${NGINX_SSL_PROTOCOLS} -eq 1 ]; then Display --indent 8 --text "- Protocols configured" --result "YES" --color GREEN + FIND=`${GREPBINARY} "ssl_protocols" ${NGINX_CONF_LOCATION} | ${GREPBINARY} "SSLv[12]"` + if [ "${FIND}" = "" ]; then + Display --indent 10 --text "- Insecure protocols found" --result "NO" --color GREEN + else + Display --indent 10 --text "- Insecure protocols found" --result "YES" --color RED + fi else Display --indent 8 --text "- Protocols configured" --result "NO" --color RED NGINX_SSL_SUGGESTION=1 |