- fix: relative redirect led to fp (https)

bjacke · Feb 22, 2016 · 20cee1e · 20cee1e
1 parent c70a13d
commit 20cee1e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/testssl.sh b/testssl.sh
@@ -720,7 +720,7 @@ run_http_header() {
           301|302|307|308)
                redirect=$(grep -a '^Location' $HEADERFILE | sed 's/Location: //' | tr -d '\r\n')
                out ", redirecting to \"$redirect\""
-               if [[ $redirect != "https://"* ]]; then
+               if [[ $redirect == "http://"* ]]; then
                     pr_litered " -- Redirect to insecure URL (NOT ok)"
                     fileout "status_code" "NOT OK" \, "Redirect to insecure URL (NOT ok). Url: \"$redirect\""
                fi
@@ -6780,4 +6780,4 @@ fi
 exit $?
 
 
-#  $Id: testssl.sh,v 1.466 2016/02/20 20:46:16 dirkw Exp $
+#  $Id: testssl.sh,v 1.467 2016/02/22 09:44:42 dirkw Exp $