anotehr attempt at fixing protocol listing for Fedora's OpenSSL
authorRalf Jung <post@ralfj.de>
Sun, 23 Nov 2014 19:19:02 +0000 (20:19 +0100)
committerRalf Jung <post@ralfj.de>
Sun, 23 Nov 2014 19:19:02 +0000 (20:19 +0100)
tls-check

index 84ca0094df53a911e9a739d536b388fcb958282d..fcbf94105f7f686bbe035e625d3790f839bff637 100755 (executable)
--- a/tls-check
+++ b/tls-check
@@ -119,6 +119,10 @@ class CipherPropsProvider:
         self.props = {}
     
     def getProps(self, protocol, cipher):
+        # strip the sub-version-number from the protocol
+        pos = protocol.find('_')
+        if pos >= 0:
+            protocol = protocol[:pos]
         # as OpenSSL about this cipher
         cipherInfo = subprocess.check_output(["openssl", "ciphers", "-v", "-"+protocol, cipher]).decode('UTF-8').strip()
         assert '\n' not in cipherInfo, "Cipher "+cipher+" produced unexpected output:\n"+cipherInfo