From 130b5b2aacc6beb448fd43dc31eb501a85b5c058 Mon Sep 17 00:00:00 2001 From: Tomasz Kramkowski Date: Mon, 23 May 2022 13:53:38 +0100 Subject: [PATCH] Fix CRIME test on servers only supporting TLS 1.3 As jsonID is not set by run_crime, make the fileout invocation for servers supporting only TLS 1.3 use the literal "CRIME_TLS" instead. Previously running testssl with CSV or JSON output would produce an item with the wrong ID. --- testssl.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/testssl.sh b/testssl.sh index 020197c..9384997 100755 --- a/testssl.sh +++ b/testssl.sh @@ -14666,7 +14666,7 @@ run_crime() { pr_svrty_best "not vulnerable (OK)" [[ $DEBUG -ge 1 ]] && out ", no compression in TLS 1.3 only servers" outln - fileout "$jsonID" "OK" "TLS 1.3 only server" "$cve" "$cwe" + fileout "CRIME_TLS" "OK" "TLS 1.3 only server" "$cve" "$cwe" return 0 fi