TLS-Scanner
TLS-Scanner copied to clipboard
Add Version to Output
Add the TLS-Scanner version to the output of the scanner (and the JSON). This is useful when continuing to process the data with other tools.
As discussed: Extracting the version from the jar works, however in the long run it would be nice to also have the versions in the package.
Up to discussion:
To implement this we still need to clarify which versions to store. Of course TLS-Scanner and TLS-Attacker. However, (especially in dev environments) it may be helpful to include the versions of more dependencies (e.g., X.509, ASN.1). Hence, I'd opt for trying to find versions for all dependencies (or at least all from the TLS-Attacker universe).
We also discussed that storing the java version may be helpful. Maybe even the flavor (Oracle vs OpenJDK vs Red Hat,...)
As this version extraction util is helpful across all projects (TLS-Attacker for debugging, TLS-Scanner, TLS-Crawler, TLS-Anvil; similarly the projects of other protocols), we might want to implement it somewhere central and not only in the scanner.
The PR implements it in the scanner atleast its not the most elegant way aswell...
I added basic functionality now - we can circle back to this and develop a more generic solution if anyone has time for it/needs it