From d6a9360f2ce1e27bcdcf928090e2a8554517955e Mon Sep 17 00:00:00 2001
From: Dirk Wetter <dirk@testssl.sh>
Date: Wed, 22 Apr 2020 14:08:58 +0200
Subject: [PATCH] Fix known DH but not weak keys to be capped @ A not B

---
 testssl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/testssl.sh b/testssl.sh
index 12f7ae8..f6f5656 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -16675,7 +16675,7 @@ run_logjam() {
      else
           if [[ $subret -eq 1 ]]; then
                out_common_prime "$jsonID2" "$cve" "$cwe"
-               set_grade_cap "B" "Uses weak DH key exchange parameters (vulnerable to LOGJAM)"
+               set_grade_cap "A" "Uses known DH key exchange parameters"
                if ! "$openssl_no_expdhciphers"; then
                     outln ","
                     out "${spaces}but no DH EXPORT ciphers${addtl_warning}"