TLS-Scanner icon indicating copy to clipboard operation
TLS-Scanner copied to clipboard

Add Version to Output

Open ic0ns opened this issue 10 months ago • 1 comments

Add the TLS-Scanner version to the output of the scanner (and the JSON). This is useful when continuing to process the data with other tools.

ic0ns avatar Jan 21 '25 12:01 ic0ns

As discussed: Extracting the version from the jar works, however in the long run it would be nice to also have the versions in the package.

Up to discussion:

To implement this we still need to clarify which versions to store. Of course TLS-Scanner and TLS-Attacker. However, (especially in dev environments) it may be helpful to include the versions of more dependencies (e.g., X.509, ASN.1). Hence, I'd opt for trying to find versions for all dependencies (or at least all from the TLS-Attacker universe).

We also discussed that storing the java version may be helpful. Maybe even the flavor (Oracle vs OpenJDK vs Red Hat,...)

As this version extraction util is helpful across all projects (TLS-Attacker for debugging, TLS-Scanner, TLS-Crawler, TLS-Anvil; similarly the projects of other protocols), we might want to implement it somewhere central and not only in the scanner.

XoMEX avatar Feb 07 '25 09:02 XoMEX

The PR implements it in the scanner atleast its not the most elegant way aswell...

ic0ns avatar Jun 09 '25 20:06 ic0ns

I added basic functionality now - we can circle back to this and develop a more generic solution if anyone has time for it/needs it

ic0ns avatar Jun 10 '25 04:06 ic0ns