Skip to content

Commit

Permalink
Fix checks for whether X25519 and X448 are supported
Browse files Browse the repository at this point in the history
In some cases OpenSSL returns an "unsupported" message rather than a "not found" message if X25519 and X448 are not supported. This commit changes the check for whether X5519 and X448 are supported for checking for either response.
  • Loading branch information
dcooper16 authored Jan 21, 2025
1 parent 0c71658 commit a85073b
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions testssl.sh
Original file line number Diff line number Diff line change
Expand Up @@ -20354,8 +20354,8 @@ find_openssl_binary() {
$OPENSSL s_client -tls1_3 </dev/null 2>&1 | grep -aiq "unknown option" || HAS_TLS13=true
$OPENSSL s_client -no_ssl2 </dev/null 2>&1 | grep -aiq "unknown option" || HAS_NO_SSL2=true

$OPENSSL genpkey -algorithm X448 2>&1 | grep -aq "not found" || HAS_X448=true
$OPENSSL genpkey -algorithm X25519 2>&1 | grep -aq "not found" || HAS_X25519=true
$OPENSSL genpkey -algorithm X448 2>&1 | grep -Eaq "not found|unsupported" || HAS_X448=true
$OPENSSL genpkey -algorithm X25519 2>&1 | grep -Eaq "not found|unsupported" || HAS_X25519=true
$OPENSSL pkey -help 2>&1 | grep -q Error || HAS_PKEY=true
$OPENSSL pkeyutl 2>&1 | grep -q Error || HAS_PKUTIL=true

Expand Down

0 comments on commit a85073b

Please sign in to comment.