Commit Graph

320 Commits

Author SHA1 Message Date
Dirk
07394d2d17 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-04-10 15:16:20 +02:00
Dirk
b8384eceff - underline CN, SAN and issuer deutschepost case (see sourceforge.net/p/ssllabs/mailman/message/33764851/) 2015-04-10 15:15:47 +02:00
Dirk Wetter
79ee5b377a Update Readme.md 2015-04-10 10:13:30 +02:00
Dirk Wetter
b670c01f36 Update Readme.md 2015-04-09 22:24:57 +02:00
Dirk
b0c68d4429 FIX: missing server preferences, NEW: each cipher server preferences per protocol! 2015-04-09 22:08:48 +02:00
Dirk
9945ef0e81 - 2015-04-09 21:45:22 +02:00
Dirk
5051eb3d5d - fixes to changes from Peter's better cmd line parsing
- cosmetc improvements (vulneraibilities)
2015-04-09 21:42:52 +02:00
Dirk Wetter
cb98920733 Merge pull request #79 from PeterMosmans/refactoring
Refactored major parts of code
2015-04-09 21:38:29 +02:00
Peter Mosmans
28518abb55 Removed GNU getopt
Minor fix to --poodle option
2015-04-07 18:05:52 +10:00
Peter Mosmans
2009cfef26 Refactored major parts of code
Note that due to the refactoring of some status messages, the output will be slightly different (more verbose) than previous versions

Moved specific status messages to http_header()
Moved specific status messages to breach()
Moved specific status messages to ccs_injection()
Moved specific status messages to heartbleed()
Moved specific status messages to renego()
Moved specific status messages to crime()
Moved specific status messages to tls_poodle()
Moved specific status messages to freak()
Moved specific status messages to beast()

Added some more documentation for functions

Fixed typos in help

Created new function main:
This is the main function of testssl.sh
Refactored major part of the original main function

Created new function startup:
Parses the startup options

Created new function intialize_globals:
Initializes all used global variables

Created new function scanning_defaults:
Sets default scanning options when only one parameter (URI) is given

TODO: Refactor more/duplicate parts of functions

Note: For the new functions, fixed spaces (4) are used instead of tabs
2015-04-07 17:00:43 +10:00
Dirk
44b31a1c54 FIX #80: show HTTP 401 2015-04-02 13:35:22 +02:00
Dirk
80f932ca30 NEW: added security headers 2015-04-02 13:04:57 +02:00
Dirk
9ea84ee6ec - got rid of "strings" 2015-04-02 12:19:24 +02:00
Dirk
348f651fc8 - updated binaries from Peter. Necessary because handshake under rare circumstances
failed (routines:tls1_setup_key_block:cipher or hash unavailable:t1_enc.c:802.
  SLES 12 server, some ciphers under TLS 1.2
2015-04-02 11:46:12 +02:00
Dirk
7b9c125046 protocol check via sockets now also for SSLv3 2015-03-31 10:34:30 +02:00
Dirk
5e9bb1c7e2 cleanups / bsd date in tls time 2015-03-30 23:09:19 +02:00
Dirk
74b6bd7241 rechi 2015-03-30 15:03:29 +02:00
Dirk
9bd1b44270 open fixes from Rechi (pull request $67) 2015-03-30 14:59:44 +02:00
Dirk Wetter
77fd58e556 Merge pull request #75 from feld/tr
Using square brackets in tr results in trying to match/replace them
2015-03-19 09:14:54 +01:00
Dirk Wetter
c0e6777666 Merge pull request #76 from feld/printf
Fix variable directly referenced in printf
2015-03-19 09:14:32 +01:00
Mark Felder
1791af3659 Fix variable directly referenced in printf 2015-03-18 15:43:06 -05:00
Mark Felder
bd95459c8d Using square brackets in tr results in trying to match/replace them 2015-03-18 15:42:21 -05:00
Dirk
7157d094bb Дилян 2015-03-17 22:14:05 +01:00
Dirk
485f0f8080 - FIX for 3des cipher report (thx Дилян) 2015-03-17 22:12:25 +01:00
Dirk
1de535cc25 - added two pairs of ciphers to server preference (thx Dilian) 2015-03-17 22:02:23 +01:00
Dirk
79396acf97 - working tls handshake with bash sockets (not yet in production, hint: see option "-q" in the bottom) 2015-03-17 18:11:18 +01:00
Dirk
c4877799ec - check whether openssl is executable
- spaces to tabs
- adding hint to "aha" in help
2015-03-17 15:14:58 +01:00
Dirk
761e854610 - FIX for date --> applied to other BSD systems too
- FIX for SNI output as it doensn';t make sense for non HTTP servives
- lines for RC4 and PFS shortenedA
- display all MX records to test before testing
- removed LOCERR, added CCS_MAX_WAITSOCK, HEARTBLEED_MAX_WAITSOCK
2015-03-17 12:22:21 +01:00
Dirk
c8090600b6 - some internal code internal cleanups
- minor cosmetic output corrections
- preparation for bash sockets for SSLv3 to TLS 1.2
2015-03-16 00:22:51 +01:00
Dirk
41c4ed94c1 further improvements through shellcheck 2015-03-15 16:59:29 +01:00
Dirk
639258cfe0 FIX #74 for sed BSD: doesn't like inline \n
headline for BEAST was missing
2015-03-15 16:10:14 +01:00
Dirk
c2ece82d9b - FIX: regression for wc -l w/o cat (3x)
- removal of unneccessary waitpid, inline
2015-03-15 14:41:34 +01:00
Dirk
bdd0602c1f - prework for checking hpkp fingerprints 2015-03-15 10:18:37 +01:00
Dirk
7d43dd7c8a - Shellcheck static analysis by Mark 2015-03-15 09:04:49 +01:00
Dirk Wetter
06268de428 Merge pull request #73 from feld/master
Shellcheck static analysis
2015-03-15 08:56:01 +01:00
Mark Felder
5478fe14e7 Make date command work with both Linux and FreeBSD 2015-03-13 15:51:50 -05:00
Mark Felder
b57d535341 Merge branch 'master' of github.com:feld/testssl.sh 2015-03-13 15:24:37 -05:00
Mark Felder
fa83aa33c4 more ps >/dev/null fixes
more useless cat
2015-03-13 15:24:16 -05:00
Mark Felder
4f6e94ab29 More useless cat 2015-03-13 15:19:47 -05:00
Mark Felder
541788fcad Remove 2>&1 for the ps $pid lines; it's unnecessary 2015-03-13 15:16:21 -05:00
Mark Felder
69dfc1f322 Merge branch 'master' of github.com:feld/testssl.sh 2015-03-13 15:12:45 -05:00
Mark Felder
268b3b02f4 Remove useless kittens 2015-03-13 15:10:36 -05:00
Mark Felder
6747974bc3 Revert to 2>&1 > /dev/null order because it isn't behaving correctly. 2015-03-13 14:56:30 -05:00
Mark Felder
f530eaf5fc Replace expr with $(( ))
https://github.com/koalaman/shellcheck/wiki/SC2003
2015-03-13 14:54:36 -05:00
Mark Felder
846dbad3d2 Fix missing single quote 2015-03-13 14:26:02 -05:00
Mark Felder
95b842ee49 Fix order of the redirect
https://github.com/koalaman/shellcheck/wiki/SC2069
2015-03-13 10:00:14 -05:00
Mark Felder
4b513de6c0 Replace backticks with $(..)
https://github.com/koalaman/shellcheck/wiki/SC2006
2015-03-13 09:52:39 -05:00
Dirk
d31b517b31 - @feld 2015-03-13 12:21:06 +01:00
Dirk
dc05ff9b13 - FIX garbled output for servers with a TLS reply on SSLv2 socket call 2015-03-13 12:20:19 +01:00
Dirk Wetter
1ca03e3ed9 Merge pull request #72 from feld/feld
Minor optimizations to reduce unnecessary forking
2015-03-13 11:00:52 +01:00