From e3b254d0a15579a0ee984f461e2b2e1291b4b84a Mon Sep 17 00:00:00 2001
From: Dirk <dirk@testssl.sh>
Date: Fri, 20 Oct 2017 19:58:20 +0200
Subject: [PATCH] FIX #869

---
 testssl.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/testssl.sh b/testssl.sh
index b462c08..b4d28a7 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -13251,14 +13251,14 @@ get_caa_rr_record() {
                     return 7
                fi
           done <<< "$raw_caa"
-          safe_echo "$all_caa"
+          sort <<< "$(safe_echo "$all_caa")"
           return 0
-     elif grep -q '"' <<< $raw_caa; then
+     elif grep -q '"' <<< "$raw_caa"; then
           raw_caa=${raw_caa//\"/}                           # strip all ". Now we should have flag, name, value
           #caa_flag="$(awk '{ print $1 }' <<< "$raw_caa")"
           #caa_property_name="$(awk '{ print $2 }' <<< "$raw_caa")"
           #caa_property_value="$(awk '{ print $3 }' <<< "$raw_caa")"
-          safe_echo "$(awk '{ print $2"="$3 }' <<< "$raw_caa")"
+          safe_echo "$(sort <<< "$(awk '{ print $2"="$3 }' <<< "$raw_caa")")"
           return 0
      else
           # no caa record