Shorten badssl GHA as they fail too often (3.2)

Remove checks which aren't needed
This commit is contained in:
Dirk
2025-10-30 16:12:33 +01:00
parent 0b0b8ed049
commit d7ba204c6c
2 changed files with 3 additions and 3 deletions

View File

@@ -16,7 +16,7 @@ my (
$tests = 0; $tests = 0;
my $prg="./testssl.sh"; my $prg="./testssl.sh";
my $check2run = '-S -e --ids-friendly -U --severity LOW --color 0'; my $check2run = '-S --beast --sweet32 --breach --beast --lucky13 --rc4 --severity LOW --color 0';
my $uri = 'badssl.com'; my $uri = 'badssl.com';
printf "\n%s\n", "Doing severity level checks"; printf "\n%s\n", "Doing severity level checks";

View File

@@ -15,7 +15,7 @@ my (
); );
# OK # OK
pass("Running testssl.sh against badssl.com to create a baseline (may take 2~3 minutes)"); $tests++; pass("Running testssl.sh against badssl.com to create a baseline (may take 2~3 minutes)"); $tests++;
my $okout = `$prg -S -e --freak --logjam --drown --rc4 --sweet32 --breach --winshock --crime --jsonfile tmp.json --color 0 badssl.com`; my $okout = `$prg -S --jsonfile tmp.json --color 0 badssl.com`;
my $okjson = json('tmp.json'); my $okjson = json('tmp.json');
unlink 'tmp.json'; unlink 'tmp.json';
cmp_ok(@$okjson,'>',10,"We should have more then 10 findings"); $tests++; cmp_ok(@$okjson,'>',10,"We should have more then 10 findings"); $tests++;
@@ -118,7 +118,7 @@ is($found,1,"We should have a finding for this in the JSON output"); $tests++;
# TODO: CBC # TODO: CBC
#pass("Running testssl against cbc.badssl.com"); $tests++; #pass("Running testssl against cbc.badssl.com"); $tests++;
#$out = `./testssl.sh -e -U --jsonfile tmp.json --color 0 cbc.badssl.com`; #$out = `./testssl.sh -e --jsonfile tmp.json --color 0 cbc.badssl.com`;
#like($out, qr/Chain of trust.*?NOT ok\s+\(chain incomplete\)/,"Chain of trust should fail because of incomplete"); $tests++; #like($out, qr/Chain of trust.*?NOT ok\s+\(chain incomplete\)/,"Chain of trust should fail because of incomplete"); $tests++;
#$json = json('tmp.json'); #$json = json('tmp.json');
#unlink 'tmp.json'; #unlink 'tmp.json';