-
Notifications
You must be signed in to change notification settings - Fork 20
Description
The following unified diff fixes two issues:
- Redhat (and CentOS) OpenSSL does not include Elliptic Curve crypto. This patch only checks EC crypto if it is available.
- The word "Preferred" was misspelled.
I am not familiar with git and "git push" didn't work for me so I've attached it here.
diff --git a/sslscan.c b/sslscan.c
index 6ae6ec3..9e688dc 100644
--- a/sslscan.c
+++ b/sslscan.c
@@ -1549,6 +1549,7 @@ int getCertificate(struct sslCheckOptions *options)
printf(" DSA Public Key: NULL\n");
}
break;
+#ifdef EVP_PKEY_EC
case EVP_PKEY_EC:
if (publicKey->pkey.ec)
{
@@ -1567,6 +1568,7 @@ int getCertificate(struct sslCheckOptions *options)
printf(" EC Public Key: NULL\n");
}
break;
+#endif // #ifdef EVP_PKEY_EC
default:
printf(" Public Key: Unknown\n");
if (options->xmlOutput != 0)
@@ -1781,7 +1783,7 @@ int testHost(struct sslCheckOptions *options)
if (status == true)
{
// Test preferred ciphers...
-
printf("\n %sPrefered Server Cipher(s):%s\n", COL_BLUE, RESET); -
printf("\n %sPreferred Server Cipher(s):%s\n", COL_BLUE, RESET); if (options->pout == true) printf("|| Version || Bits || Cipher ||\n"); switch (options->sslVersion)