Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-10-31 22:05:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix CRIME test on servers only supporting TLS 1.3

Browse Source 
As jsonID is not set by run_crime, make the fileout invocation for
servers supporting only TLS 1.3 use the literal "CRIME_TLS" instead.

Previously running testssl with CSV or JSON output would produce an item
with the wrong ID.
This commit is contained in:
Tomasz Kramkowski
2022-05-23 13:53:38 +01:00
parent d931eb470c
commit 326a65e7ad
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
testssl.sh
View File

@@ -16710,7 +16710,7 @@ run_crime() {
pr_svrty_best "not vulnerable (OK)"
[[ $DEBUG -ge 1 ]] && out ", no compression in TLS 1.3 only servers"
outln
fileout "$jsonID" "OK" "TLS 1.3 only server" "$cve" "$cwe"
fileout "CRIME_TLS" "OK" "TLS 1.3 only server" "$cve" "$cwe"
return 0
fi