anotehr attempt at fixing protocol listing for Fedora's OpenSSL

[tls-check.git] / tls-check

diff --git a/tls-check b/tls-check
index 84ca0094df53a911e9a739d536b388fcb958282d..fcbf94105f7f686bbe035e625d3790f839bff637 100755 (executable)
--- a/tls-check
+++ b/tls-check
@@ -119,6 +119,10 @@ class CipherPropsProvider:
         self.props = {}
     
     def getProps(self, protocol, cipher):
+        # strip the sub-version-number from the protocol
+        pos = protocol.find('_')
+        if pos >= 0:
+            protocol = protocol[:pos]
         # as OpenSSL about this cipher
         cipherInfo = subprocess.check_output(["openssl", "ciphers", "-v", "-"+protocol, cipher]).decode('UTF-8').strip()
         assert '\n' not in cipherInfo, "Cipher "+cipher+" produced unexpected output:\n"+cipherInfo