Commit Graph

1246 Commits

Author SHA1 Message Date
Dirk
0eb88ff8dc FIX #626 2017-05-10 21:04:48 +02:00
Dirk Wetter
9220ad5877 Update Readme.md 2017-04-10 11:56:10 +02:00
Dirk Wetter
3f3ae226cd reflect that is the current stable 2017-04-10 11:55:43 +02:00
Dirk
baf1778540 mute the error message using bash3, see #697 (2.8) 2017-04-06 11:27:40 +02:00
Dirk
6df18caba4 "post-fix" for #697 (2.8) 2017-04-05 20:30:17 +02:00
Dirk
460ccde62b fixed regression where tmln_out made it into prepare_logging() 2017-04-05 20:15:30 +02:00
Dirk
1345a088ef FIX #697 in 2.8 (bash hiccup @ tolower) 2017-04-05 17:34:05 +02:00
Dirk
3fba2564df FIX #694 for 2.8: (CSP and other HTTP header friends were cut off @ last colon) 2017-04-05 14:56:18 +02:00
Dirk
c99fd7f37e corrected inserting 2017-04-04 10:41:01 +02:00
Dirk
23ddf97086 Merge branch '2.8' of github.com:drwetter/testssl.sh into 2.8 2017-04-04 10:07:23 +02:00
Dirk
c9b833ed5c FIX #691 (addressing case sensitive local hostnames) 2017-04-04 10:06:15 +02:00
Dirk
dcc4f3558f FIX #690 (case sensitive local hostnames) 2017-04-04 10:03:42 +02:00
Dirk
540567ec83 add, resort 2017-04-01 20:57:09 +02:00
Dirk
c9bdd23a03 make Travis work again 2017-04-01 20:56:53 +02:00
Dirk
f2bbba3b99 FIX #690
bumped up version to 2.8 final
2017-04-01 14:17:55 +02:00
Dirk
dce019488f FIX #653 -- no or double footer 2017-03-27 22:37:07 +02:00
Dirk
1e00042e46 minor cleanups 2017-03-25 13:13:57 +01:00
Dirk
cd01a656c7 FIX #543 2017-03-25 12:33:10 +01:00
Dirk Wetter
dbf6318439 Merge pull request #676 from dcooper16/minor_bugs
Fix two minor bugs
2017-03-24 19:09:57 +01:00
Dirk Wetter
7069fb4c67 Merge pull request #675 from dcooper16/fix_client_simulation_2.8
Fix client simulation in 2.8
2017-03-24 18:45:54 +01:00
Dirk Wetter
d7c5e0240f Merge pull request #673 from khorben/master
Typo
2017-03-24 18:41:38 +01:00
David Cooper
d7e4c3519b Fix two minor bugs
Two of the minor bugs that were fixed by #672 in the 2.9dev branch also appear in 2.8.
2017-03-24 11:58:54 -04:00
David Cooper
3451083bbd Fix client simulation
In `create_client_simulation_tls_clienthello()` the variable `sni_extension_found` should be set if the ClientHello includes an SNI extension. Instead it was being set if and only if the ClientHello included some extension other than SNI.

This bug wasn't detected before for two reasons:

    It is rare to have a ClientHello that includes an SNI extension, but no other extensions.

    The code still works correctly if `sni_extension_found` is set even if there is no SNI in the ClientHello.

So, the bug only creates a problem if the browser's ClientHello include an SNI extension and no other extensions (see "BingPreview Jun 2014" in the client_simulation branch).
2017-03-24 11:48:01 -04:00
Pierre Pronchery
8e15454f4c Typo 2017-03-24 13:11:24 +01:00
Dirk
faefe62bea FIX #654 (no logfile when -file is specified) 2017-03-23 16:19:23 +01:00
Dirk
f8bb74519d make MSYS2 work again ;-) 2017-03-01 18:33:47 +01:00
Dirk
9c721a1613 bumping up version to 2.8pre1
doing some corrections with shellcheck (see #434)

updating client simulation (see #394, #423) for a quick solution for 2.8 (#393)

FIX #407
2017-02-24 16:31:13 +01:00
Dirk
9d9bfdf369 FIX #641 2017-02-21 17:46:10 +01:00
Dirk
205c522178 catch border cases better (GOST ONLY, server w handshake limits) 2017-02-21 11:21:35 +01:00
Dirk
2df7982890 - fix heartbleed detection which sometimes case false positives over slow connections like sattelite links, partially addressing #352
- made CCS I more robust, FIX #313,
- removed CATs ;-)
- bumped up version to rc4 (like ARCFOUR) ;-)
2017-02-21 10:40:18 +01:00
Dirk
c4c5130a39 - FIX #591 (and in JSON for HSTS+HPKP too)
- HSTS and HPKP have now similar output
2017-01-19 21:09:25 +01:00
Dirk
89e8fcace3 FIX #566 2017-01-17 14:03:09 +01:00
Dirk
76b4cac292 add lf before -E 2017-01-17 12:02:05 +01:00
Dirk
1f76e8fa09 FIX #587 2017-01-16 14:12:32 +01:00
Dirk
1ca6c130b9 see #575 2016-12-29 00:03:36 +01:00
Dirk
dacb1611c4 remark4default_cipher in fileout fixed 2016-12-28 23:57:37 +01:00
Dirk
fd7cd54ca1 - unify timeout msgs on the console 2016-12-20 14:26:12 +01:00
Dirk
4ff62b9fe8 regression fix #290, see #549 2016-12-11 18:21:41 +01:00
Dirk
c985f68533 see #544 2016-12-01 18:21:09 +01:00
Dirk Wetter
c23e097cb8 Merge pull request #525 from tecknicaltom/fix_duplicate_id_client_sim
fix a duplicate test id in the client sim section
2016-11-19 20:00:46 +01:00
Tom Samstag
4510e407fe fix a duplicate test id in the client sim section
The Apple ATS 9 iOS 9 client simulation test had an incorrect short name
which resulted in a duplicate ID in the JSON output
2016-11-16 10:45:13 -08:00
Dirk Wetter
4057bc52ff Merge pull request #513 from dcooper16/fix_x25519
Curve X25519 fixes
2016-11-09 21:19:29 +01:00
David Cooper
43b35b8cc2 Curve X25519 fixes
This PR fixes two issues related to curve X25519.

First, while OpenSSL 1.1.0 supports curve X25519, it is not included in the output of `$OPENSSL ecparam -list_curves`. I tried several versions of OpenSSL (and one version of LibreSSL), and every version output either "Error with command" or "unknown option" in response to `$OPENSSL s_client -curves $curve` if it either did not support the `-curves` option or did not support `$curve`. (When the `-curve` option was supported with `$curve`, a "connect" error was output.)

The second issue is that the "Server Temp Key" line in the output of `s_client` is different for curve X25519. For other elliptic curves, the output is
```
Server Temp Key: ECDH, P-256, 256 bits
```
For X25519 it is:
```
Server Temp Key: X25519, 253 bits
```
So, `read_dhbits_from_file()` needs to allow for `$what_dh` being "X25519" rather than "ECDH" and `run_pfs()` needs to allow for the possibility that the curve name will be the first field rather than the second.
2016-11-08 10:10:14 -05:00
Dirk
4f99d9d658 update 2016-11-07 21:03:45 +01:00
Dirk
65c03a99ba update 2016-11-05 15:02:00 +01:00
Dirk
72ac0734d1 tolower 2016-11-05 14:55:30 +01:00
Dirk
f18a398ce3 handle better missing ca_hashes.txt 2016-11-04 08:39:14 +01:00
Dirk Wetter
63ec369f34 output polish 2016-10-29 15:37:30 +02:00
Dirk Wetter
df2704dc20 Merge pull request #498 from Sousaphone/master
Apple ATS9 client simulation
2016-10-28 21:31:39 +02:00
Dirk
99300a0059 bump version 2016-10-27 22:02:35 +02:00