Skip to content

Commit cb971b5

Browse files
committed
Doing a better guess for Opossum when tcp/80 is not a/v
This labels the result of a failed test for reaching port 80 when no direct connection is possible as likely not vulnerable. This seems safe to say, as there's another check whether a proxy is configured, like for corporate environments where a connection is only allowed though the proxy.
1 parent a549acd commit cb971b5

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

testssl.sh

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17735,8 +17735,10 @@ run_opossum() {
1773517735
prln_local_problem "direct connection to port 80 failed, better try without proxy"
1773617736
fileout "$jsonID" "WARN" "direct connection to port 80 failed, try w/o no proxy" "$cve" "$cwe"
1773717737
else
17738-
outln "connection to port 80 failed"
17739-
fileout "$jsonID" "INFO" "connection to port 80 failed" "$cve" "$cwe"
17738+
out "likely "
17739+
pr_svrty_good "not vulnerable (OK)"
17740+
outln ", connection to port 80 failed"
17741+
fileout "$jsonID" "OK" "connection to port 80 failed" "$cve" "$cwe"
1774017742
fi
1774117743
fi
1774217744
;;

0 commit comments

Comments
 (0)