Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-04-21 10:23:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3031 from testssl/fix_doc-problem_3029

Browse Source 
Fix doc error regarding MAX_SOCKET_FAIL + MAX_OSSL_FAIL
This commit is contained in:
Dirk Wetter
2026-04-20 18:58:51 +02:00
committed by GitHub
parent d2d684e31b b773fa9939
commit 146605e740
3 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
doc/testssl.1
View File

@@ -1141,14 +1141,14 @@ MAX_SOCKET_FAIL: A number which tells testssl.sh how often a TCP socket
connection may fail before the program gives up and terminates. connection may fail before the program gives up and terminates.
The default is 2. The default is 2.
You can increase it to a higher value if you frequently see a message You can increase it to a higher value if you frequently see a message
like \f[I]Fatal error: repeated openssl s_client connect problem, like \f[I]Fatal error: repeated TCP connect problems, giving up\f[R].
doesn\[cq]t make sense to continue\f[R].
.IP \[bu] 2 .IP \[bu] 2
MAX_OSSL_FAIL: A number which tells testssl.sh how often an OpenSSL MAX_OSSL_FAIL: A number which tells testssl.sh how often an OpenSSL
s_client connect may fail before the program gives up and terminates. s_client connect may fail before the program gives up and terminates.
The default is 2. The default is 2.
You can increase it to a higher value if you frequently see a message You can increase it to a higher value if you frequently see a message
like \f[I]Fatal error: repeated TCP connect problems, giving up\f[R]. like \f[I]Fatal error: repeated openssl s_client connect problem,
doesn\[cq]t make sense to continue\f[R].
.IP \[bu] 2 .IP \[bu] 2
MAX_HEADER_FAIL: A number which tells testssl.sh how often a HTTP GET MAX_HEADER_FAIL: A number which tells testssl.sh how often a HTTP GET
request over OpenSSL may return an empty file before the program gives request over OpenSSL may return an empty file before the program gives

6
doc/testssl.1.html
View File

@@ -995,13 +995,13 @@
TCP socket connection may fail before the program gives up and TCP socket connection may fail before the program gives up and
terminates. The default is 2. You can increase it to a higher terminates. The default is 2. You can increase it to a higher
value if you frequently see a message like <em>Fatal error: value if you frequently see a message like <em>Fatal error:
repeated openssl s_client connect problem, doesn’t make sense to repeated TCP connect problems, giving up</em>.</li>
continue</em>.</li>
<li>MAX_OSSL_FAIL: A number which tells testssl.sh how often an <li>MAX_OSSL_FAIL: A number which tells testssl.sh how often an
OpenSSL s_client connect may fail before the program gives up OpenSSL s_client connect may fail before the program gives up
and terminates. The default is 2. You can increase it to a and terminates. The default is 2. You can increase it to a
higher value if you frequently see a message like <em>Fatal higher value if you frequently see a message like <em>Fatal
error: repeated TCP connect problems, giving up</em>.</li> error: repeated openssl s_client connect problem, doesn’t make
sense to continue</em>.</li>
<li>MAX_HEADER_FAIL: A number which tells testssl.sh how often a <li>MAX_HEADER_FAIL: A number which tells testssl.sh how often a
HTTP GET request over OpenSSL may return an empty file before HTTP GET request over OpenSSL may return an empty file before
the program gives up and terminates. The default is 3. Also here the program gives up and terminates. The default is 3. Also here

4
doc/testssl.1.md
View File

@@ -408,8 +408,8 @@ Except the environment variables mentioned above which can replace command line
* DAYS2WARN2 is the second threshold when you'll be warning of a certificate expiration of a host, preset to 30 (days). For Let's Encrypt this value will be divided internally by 2. * DAYS2WARN2 is the second threshold when you'll be warning of a certificate expiration of a host, preset to 30 (days). For Let's Encrypt this value will be divided internally by 2.
* TESTSSL_INSTALL_DIR is the derived installation directory of testssl.sh. Relatively to that the `bin` and mandatory `etc` directory will be looked for. * TESTSSL_INSTALL_DIR is the derived installation directory of testssl.sh. Relatively to that the `bin` and mandatory `etc` directory will be looked for.
* CA_BUNDLES_PATH: If you have an own set of CA bundles or you want to point testssl.sh to a specific location of a CA bundle, you can use this variable to set the directory which testssl.sh will use. Please note that it overrides completely the builtin path of testssl.sh which means that you will only test against the bundles you point to. Also you might want to use `~/utils/create_ca_hashes.sh` to create the hashes for HPKP. * CA_BUNDLES_PATH: If you have an own set of CA bundles or you want to point testssl.sh to a specific location of a CA bundle, you can use this variable to set the directory which testssl.sh will use. Please note that it overrides completely the builtin path of testssl.sh which means that you will only test against the bundles you point to. Also you might want to use `~/utils/create_ca_hashes.sh` to create the hashes for HPKP.
* MAX_SOCKET_FAIL: A number which tells testssl.sh how often a TCP socket connection may fail before the program gives up and terminates. The default is 2. You can increase it to a higher value if you frequently see a message like *Fatal error: repeated openssl s_client connect problem, doesn't make sense to continue*. * MAX_SOCKET_FAIL: A number which tells testssl.sh how often a TCP socket connection may fail before the program gives up and terminates. The default is 2. You can increase it to a higher value if you frequently see a message like *Fatal error: repeated TCP connect problems, giving up*.
* MAX_OSSL_FAIL: A number which tells testssl.sh how often an OpenSSL s_client connect may fail before the program gives up and terminates. The default is 2. You can increase it to a higher value if you frequently see a message like *Fatal error: repeated TCP connect problems, giving up*. * MAX_OSSL_FAIL: A number which tells testssl.sh how often an OpenSSL s_client connect may fail before the program gives up and terminates. The default is 2. You can increase it to a higher value if you frequently see a message like *Fatal error: repeated openssl s_client connect problem, doesn't make sense to continue*.
* MAX_HEADER_FAIL: A number which tells testssl.sh how often a HTTP GET request over OpenSSL may return an empty file before the program gives up and terminates. The default is 3. Also here you can increase the threshold when you spot messages like *Fatal error: repeated HTTP header connect problems, doesn't make sense to continue*. * MAX_HEADER_FAIL: A number which tells testssl.sh how often a HTTP GET request over OpenSSL may return an empty file before the program gives up and terminates. The default is 3. Also here you can increase the threshold when you spot messages like *Fatal error: repeated HTTP header connect problems, doesn't make sense to continue*.
* OPENSSL2 can be used to supply an alternative openssl version. This only makes sense if you want to amend the supplied version in `bin/` which lacks TLS 1.3 support with a version which doesn not and is not in `/usr/bin/openssl`. * OPENSSL2 can be used to supply an alternative openssl version. This only makes sense if you want to amend the supplied version in `bin/` which lacks TLS 1.3 support with a version which doesn not and is not in `/usr/bin/openssl`.
* OSSL_SHORTCUT should be set to false when you run interactively and don't want to switch automatically to `/usr/bin/openssl` (`OPENSSL2`) if you encounter a TLS 1.3-only host. * OSSL_SHORTCUT should be set to false when you run interactively and don't want to switch automatically to `/usr/bin/openssl` (`OPENSSL2`) if you encounter a TLS 1.3-only host.