For some of our target systems we get "sha1WithRSA" back which cannot be parsed by testssl.sh currently.
It is just a synonym for "sha1WithRSAEncryption".
Our temporary quickfix:
out "$indent" ; pr_bold " Signature Algorithm "
jsonID="cert_signatureAlgorithm"
case $cert_sig_algo in
sha1WithRSAEncryption)
pr_svrty_medium "SHA1 with RSA"
if [[ "$SERVICE" == HTTP ]] || "$ASSUME_HTTP"; then
out " -- besides: users will receive a "; pr_svrty_high "strong browser WARNING"
fi
outln
fileout "${jsonID}${json_postfix}" "MEDIUM" "SHA1 with RSA"
;;
sha1WithRSA)
pr_svrty_medium "SHA1 with RSA"
if [[ "$SERVICE" == HTTP ]] || "$ASSUME_HTTP"; then
out " -- besides: users will receive a "; pr_svrty_high "strong browser WARNING"
fi
outln
fileout "${jsonID}${json_postfix}" "MEDIUM" "SHA1 with RSA"
;;
thx!
For some of our target systems we get "sha1WithRSA" back which cannot be parsed by testssl.sh currently.
It is just a synonym for "sha1WithRSAEncryption".
Our temporary quickfix:
thx!