From 81c594d8549c30901f22c3aaff6fbd9128cbb5b0 Mon Sep 17 00:00:00 2001
From: Frank Breedijk <fbreedijk@schubergphilis.com>
Date: Thu, 17 Dec 2015 11:35:14 +0100
Subject: [PATCH] Crime

---
 testssl.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/testssl.sh b/testssl.sh
index 0713b68..1d77ebf 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -4347,6 +4347,7 @@ run_crime() {
      $OPENSSL zlib -e -a -in /dev/stdin &>/dev/stdout </dev/null | grep -q zlib
      if [[ $? -eq 0 ]]; then
           local_problem "$OPENSSL lacks zlib support"
+          output_finding "crime" "$NODEIP" "$PORT" "WARN" "CRIME, TLS (CVE-2012-4929) : Not tested. $OPENSSL lacks zlib support"
           return 7
      fi
 
@@ -4356,13 +4357,18 @@ run_crime() {
           pr_litegreen "not vulnerable (OK)"
           if [[ $SERVICE != "HTTP" ]] && ! $CLIENT_AUTH;  then 
                out " (not using HTTP anyway)"
+               output_finding "crime" "$NODEIP" "$PORT" "OK" "CRIME, TLS (CVE-2012-4929) : Not vulnerable (OK) (not using HTTP anyway)"
+          else
+               output_finding "crime" "$NODEIP" "$PORT" "OK" "CRIME, TLS (CVE-2012-4929) : Not vulnerable (OK)"
           fi
           ret=0
      else
           if [[ $SERVICE == "HTTP" ]]; then
                pr_litered "VULNERABLE (NOT ok)"
+               output_finding "crime" "$NODEIP" "$PORT" "NOT OK" "CRIME, TLS (CVE-2012-4929) : VULNERABLE (NOT ok)"
           else
                pr_brown "VULNERABLE (NOT ok), but not using HTTP: probably no exploit known"
+               output_finding "crime" "$NODEIP" "$PORT" "NOT OK" "CRIME, TLS (CVE-2012-4929) : VULNERABLE (NOT ok), but not using HTTP: probably no exploit known"
           fi
           ret=1
      fi