diff --git a/.travis.yml b/.travis.yml index d1d660b..06f35cd 100644 --- a/.travis.yml +++ b/.travis.yml @@ -7,6 +7,12 @@ addons: packages: - dnsutils - jsonlint +before_install: + - if ! git diff --name-only $TRAVIS_COMMIT_RANGE | grep -qvE '(.md)|(.pem)|(.pdf)|(.html)|^(LICENSE)|^(docs)|^(utils)|^(bin)|(Dockerfile)' + then + echo "no code was updated, not running the CI." + exit + fi install: - cpanm --notest Test::More - cpanm --notest Data::Dumper diff --git a/CHANGELOG.md b/CHANGELOG.md index cdbd545..1e0d9f2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -27,7 +27,10 @@ * Added environment variable for amount of attempts for ssl renegotiation check * Added --user-agent argument to support using a custom User Agent * Added --overwrite argument to support overwriting output files without warning -* Headerflag X-XSS-Protection is labeled as INFO +* Headerflag X-XSS-Protection is now labeled as INFO +* Client simulation runs in wide mode which is even better readable +* Added --reqheader to support custom headers in HTTP requests + ### Features implemented / improvements in 3.0 diff --git a/CREDITS.md b/CREDITS.md index beee57a..de826d5 100644 --- a/CREDITS.md +++ b/CREDITS.md @@ -42,6 +42,7 @@ Full contribution, see git log. * Jim Blankendaal - maximum certificate lifespan of 398 days - ssl renegotiation amount variable + - custom http request headers * Frank Breedijk - Detection of insecure redirects @@ -181,4 +182,3 @@ Probably more I forgot to mention which did give me feedback, bug reports and he * Ivan Ristic/Qualys for the liberal license which made it possible to make partly use of the client data * My family for supporting me doing this work - diff --git a/Dockerfile.md b/Dockerfile.md index bbdf371..1eed4e3 100644 --- a/Dockerfile.md +++ b/Dockerfile.md @@ -1,6 +1,21 @@ -## Usage: +## Usage + +### From git directory + +``` +docker build . +``` + +Catch is when you run without image tags you need to catch the ID when building + +``` +[..] +---> 889fa2f99933 +Successfully built 889fa2f99933 +``` + +More comfortable is -(in git directory): ``` docker build -t mytestssl . docker run --rm -t mytestssl example.com @@ -13,22 +28,22 @@ docker run -t mytestssl --help docker run --rm -t mytestssl -p --header example.com ``` -or pull the image from dockerhub and run: +### From dockerhub + +You can pull the image from dockerhub and run: ``` -docker run --rm -t drwetter/testssl.sh --pfs example.com +docker run --rm -t drwetter/testssl.sh --fs example.com ``` -Tags supported are: ``latest``, ``stable`` which _for now_ are all the same and point to ``3.0``. +Supported tages are: ``3.1dev`` and ``latest`, which are the same, i.e. the rolling release. ``3.0`` is the latest stable version from git which might have a few improvements (see git log) over the released version 3.0.X. ``docker run --rm -t drwetter/testssl.sh:stable example.com``. -And for the indomitable users who prefer to run old stuff you can use the tag ``2.9.5``. Please note ``2.9dev`` should not be used anymore. - -Keep in mind that any output file (--log, --html, --json etc.) will be created in the container. If you wish to have this created in a local directory you can mount a volume into the container and change the output prefix where the container user has write access to, e.g.: +Keep in mind that any output file (--log, --html, --json etc.) will be created within the container. If you wish to have this created in a local directory on your host you can mount a volume into the container and change the output prefix where the container user has write access to, e.g.: ``` docker run --rm -t -v /tmp:/data drwetter/testssl.sh --htmlfile /data/ example.com ``` -which writes the output to ``/tmp/example.com_p443--