From 69087f27ac89acc9c9b1b1a5e3b89a992aa1235c Mon Sep 17 00:00:00 2001 From: Julien Vehent Date: Wed, 20 Nov 2013 10:30:14 -0500 Subject: [PATCH] User larger list of cipher with COMPLEMENTOFALL --- CiphersScan.sh | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/CiphersScan.sh b/CiphersScan.sh index 45c1520..5d15571 100755 --- a/CiphersScan.sh +++ b/CiphersScan.sh @@ -5,6 +5,7 @@ BENCHMARKITER=30 OPENSSLBIN="./openssl" #OPENSSLBIN="/usr/bin/openssl" TIMEOUT=10 +CIPHERSUITE="ALL:COMPLEMENTOFALL" REQUEST="GET / HTTP/1.1 Host: $TARGET @@ -97,7 +98,7 @@ ALLCIPHERS=0 if [ ! -z $2 ]; then if [ "$2" == "-v" ]; then VERBOSE=1 - echo "Loading $($OPENSSLBIN ciphers -v ALL 2>/dev/null|grep Kx|wc -l) ciphersuites from $(echo -n $($OPENSSLBIN version 2>/dev/null))" + echo "Loading $($OPENSSLBIN ciphers -v $CIPHERSUITE 2>/dev/null|grep Kx|wc -l) ciphersuites from $(echo -n $($OPENSSLBIN version 2>/dev/null))" $OPENSSLBIN ciphers ALL 2>/dev/null fi if [ "$2" == "-a" ]; then @@ -107,7 +108,9 @@ fi cipherspref=(); results=() -get_cipher_pref "ALL" + +# Call to the recursive loop that retrieves the cipher preferences +get_cipher_pref $CIPHERSUITE ctr=1 for cipher in "${cipherspref[@]}"; do pciph=$(echo $cipher|awk '{print $1}')