Merge pull request #38 from PrimalPimmy/tlsfix

TLS checking logic change and removed tests
kubearmor · Jun 28, 2024 · 10af489 · 10af489
2 parents cd2780f + 153b162
commit 10af489
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 63 deletions.
diff --git a/.github/workflows/ci-test-ginkgo.yml b/.github/workflows/ci-test-ginkgo.yml
diff --git a/src/findings_tls b/src/findings_tls
@@ -64,9 +64,9 @@ k8tls_tls_01checkversion()
 {
 	do_openssl_scan
 	[[ "$TLS_Status" != "TLS" ]] && return	# no finding
-	if [ "$TLS_Protocol_version" != "TLSv1.2" ] || [ "$TLS_Protocol_version" != "TLSv1.3" ]; then
+	if [ "$TLS_Protocol_version" != "TLSv1.2" ] && [ "$TLS_Protocol_version" != "TLSv1.3" ]; then
 		status="FAIL"
-	fi
+
 	cat << EOF >> $TMPJSONSEC
 				{
 					"plugin": "tls-version",
@@ -81,6 +81,7 @@ k8tls_tls_01checkversion()
 					"status": "$status"
 				}
 EOF
+  fi
 }
 
 k8tls_tls_02certificateChecks()