From ee0b12bfca590a866c5ff59d3a62e0d881f63ca4 Mon Sep 17 00:00:00 2001 From: David Cooper Date: Fri, 26 Jan 2018 17:27:10 -0500 Subject: [PATCH] Label elliptic curve public keys as "EC" In the output created by certificate_info(), the "Server key size" line labels an elliptic curve key as "ECDSA." This commit changes the label to "EC." I believe this a more correct label since ECDSA is a signature algorithm, not a key type. Also, while unlikely, an elliptic curve key in a certificate may be used for ECDH (e.g, in TLS_ECDH_RSA_WITH_AES_128_CBC_SHA) rather than ECDSA. Note that this does not impact the JSON or CSV output, since the corresponding fileout command already uses "$cert_keysize EC bits" --- testssl.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/testssl.sh b/testssl.sh index 338a599..149f66a 100755 --- a/testssl.sh +++ b/testssl.sh @@ -6522,7 +6522,7 @@ certificate_info() { case $cert_key_algo in *RSA*|*rsa*) out "RSA ";; *DSA*|*dsa*) out "DSA ";; - *ecdsa*|*ecPublicKey) out "ECDSA ";; + *ecdsa*|*ecPublicKey) out "EC ";; *GOST*|*gost*) out "GOST ";; *dh*|*DH*) out "DH " ;; *) pr_fixme "don't know $cert_key_algo " ;;