Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-01-07 09:10:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix CRIME test on servers only supporting TLS 1.3

Browse Source 
As jsonID is not set by run_crime, make the fileout invocation for
servers supporting only TLS 1.3 use the literal "CRIME_TLS" instead.

Previously running testssl with CSV or JSON output would produce an item
with the wrong ID.
This commit is contained in:
Tomasz Kramkowski 2022-05-23 13:53:38 +01:00
parent 897443f035
commit 130b5b2aac
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
testssl.sh
View File

@ -14666,7 +14666,7 @@ run_crime() {
pr_svrty_best "not vulnerable (OK)" pr_svrty_best "not vulnerable (OK)"
[[ $DEBUG -ge 1 ]] && out ", no compression in TLS 1.3 only servers" [[ $DEBUG -ge 1 ]] && out ", no compression in TLS 1.3 only servers"
outln outln
fileout "$jsonID" "OK" "TLS 1.3 only server" "$cve" "$cwe" fileout "CRIME_TLS" "OK" "TLS 1.3 only server" "$cve" "$cwe"
return 0 return 0
fi fi