Commit Graph
5535 Commits
Author SHA1 Message Date
dependabot[bot]andGitHub b9f754f082 Bump shogo82148/actions-setup-perl from 1.43.1 to 1.44.0
---
updated-dependencies:
- dependency-name: shogo82148/actions-setup-perl
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-14 00:23:10 +00:00
Dirk WetterandGitHub 98bd9d66a4 Merge pull request #3133 from testssl/socket_timeout_parser
Fix error which prohibited passing an equal sign after "--socket-timeout"
2026-09-03 19:07:43 +02:00
Dirk d2df98d03a Fix error which prohibited passing an equal sign after "--socket-timeout" 2026-09-03 18:09:45 +02:00
Dirk WetterandGitHub 9e09f10380 Merge pull request #3131 from testssl/perl_quality
Add Perl static analysis
2026-09-01 20:02:32 +02:00
Dirk 8eb05bd862 '$' should be passed to the shell not '\$'
... thus not double quoting like \\$
2026-09-01 16:58:14 +02:00
Dirk c312fb8230 Audit all modules
but let for now exit the check always with zero
2026-09-01 16:29:16 +02:00
Dirk bd67671fad double quoting needed in passed expression to grep 2026-09-01 16:19:52 +02:00
Dirk 6b1de564d8 Make the flow finally(TM) work 2026-09-01 15:49:31 +02:00
Dirk 4bab452316 Fix syntax error 2026-09-01 15:42:43 +02:00
Dirk 1880a06110 Enable warnings 2026-09-01 15:27:44 +02:00
Dirk 7e1cd8a8c4 Add "use warnings" + correct subroutine prototypes declaration 2026-09-01 15:21:10 +02:00
Dirk 8ab28557a1 Add "use warnings" 2026-09-01 15:18:46 +02:00
Dirk 71322d89cb Squash complains by perlcritic
and enable warnings
2026-09-01 15:07:52 +02:00
Dirk Wetter d857e0fe60 Add .perlcritic policy overrides for test suite 2026-08-31 23:26:36 +02:00
Dirk Wetter 23129834b9 Add all other perl modules too 2026-08-31 22:04:07 +02:00
Dirk Wetter a2027d527f fix perttidy and cpan-audit 2026-08-31 20:50:00 +02:00
Dirk Wetter f77dcbefd5 Selfcheck removed
(not sure whether that was right to try in the first place, probably not)
2026-08-31 20:35:02 +02:00
Dirk Wetter d58557b430 Newer versions
- use newer checkout hash
- use appropriate perl version
2026-08-31 20:30:35 +02:00
Dirk Wetter f5d228e28e Add Perl static analysis
* Run perl -c on every t/*.t file as a fast pre-check before prove.
* Add Perl::Critic (a curated policy set) and perltidy --check for the Perl test code — the repo lints its bash with shellcheck but has zero linting for its Perl.
* Add Test::NoWarnings (and/or Test::Fatal) to the test harness so warnings/exceptions in the code under test fail the build.

Not yet sure about using the hash / SHA-pinning. To be reconsidered later
2026-08-31 20:05:30 +02:00
Dirk WetterandGitHub 978c399798 Merge pull request #3126 from ChrisJr404/banner-utc-offset
Show the UTC offset in the start and done banner
2026-08-31 11:02:38 +02:00
Chris (ChrisJr404) fa53ee74e4 Normalize the UTC offset in the Start and Done banners in 32_isHTML_valid.t 2026-08-30 19:29:54 -04:00
Dirk WetterandGitHub fef1f43aff Merge pull request #3129 from dcooper16/declare_jsonID
Declare jsonID
2026-08-30 21:48:45 +02:00
David CooperandGitHub a9075ef932 Declare jsonID
As reported in #3128, there are a few instances in which `jsonID` is used, but is not declared as a `local` variable. This commit fixes that problem.

In addition, for consistency, it changes `run_sweet32()` to use `$jsonID` rather than the hard coded string "SWEET32".
2026-08-30 11:54:16 -07:00
Dirk WetterandGitHub 853850e3f4 Merge pull request #3125 from testssl/CA_store_update_2608
CA store update 2608
2026-08-28 10:42:04 +02:00
Dirk Wetter 639f45e8d0 Update 2026/08 2026-08-28 00:59:31 +02:00
Dirk Wetter 296575029d Still MS.pem still contains DST Root CA X3 2026-08-28 00:58:59 +02:00
Chris (ChrisJr404) 28a2c77257 Label the timezone offset in the start and done banner 2026-08-26 11:42:12 -04:00
Chris (ChrisJr404) 978c3964d2 Show the UTC offset in the start and done banner 2026-08-24 17:36:45 -04:00
Dirk Wetter 2571730bb1 2026-08-13 from https://curl.haxx.se/docs/caextract.html 2026-08-24 19:45:28 +02:00
Dirk Wetter f9d6355002 store from jdk-25.0.4.1
from https://download.oracle.com/java/25/latest/jdk-25_linux-x64_bin.tar.gz
2026-08-24 19:43:12 +02:00
Dirk Wetter 5461110ac4 store from today via git repo 2026-08-24 19:42:19 +02:00
Dirk Wetter 74bfffecae DL link for JDK, --depth=1 for Apple repo 2026-08-24 19:39:32 +02:00
Dirk WetterandGitHub 6d555cac4e Merge pull request #3118 from testssl/dependabot/github_actions/shogo82148/actions-setup-perl-1.43.1
Bump shogo82148/actions-setup-perl from 1.42.0 to 1.43.1
2026-08-24 10:52:03 +02:00
Dirk WetterandGitHub 5894d76a63 Merge pull request #3119 from testssl/dependabot/github_actions/docker/login-action-4.6.0
Bump docker/login-action from 4.5.2 to 4.6.0
2026-08-24 10:50:22 +02:00
Dirk WetterandGitHub ff51c14b52 Merge pull request #3123 from dcooper16/cleanup3120
Cleanup #3120
2026-08-24 10:49:22 +02:00
David Cooper ac7294182b Cleanup #3120
This commit cleans up PR #3120. It replaces two long "if" statements with "case" statements and it removes a second declaration of "nr_cert_types" in run_server_defaults().
2026-08-22 13:30:20 -07:00
Dirk WetterandGitHub 1283aff3d4 Merge pull request #3120 from dcooper16/slhdsa
Support SLH-DSA server keys
2026-08-15 16:27:02 +02:00
David b662a0f746 Support SLH-DSA server keys
This commit adds support for server certificates that have SLH-DSA public keys. The code points come from https://datatracker.ietf.org/doc/draft-reddy-tls-slhdsa/. These code points were added to OpenSSL 4.1.0-dev by https://github.com/openssl/openssl/pull/31248.
2026-08-14 15:31:33 -07:00
dependabot[bot]andGitHub 876c7f5c77 Bump docker/login-action from 4.5.2 to 4.6.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.5.2...v4.6.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-12 00:23:07 +00:00
dependabot[bot]andGitHub 6653ba7724 Bump shogo82148/actions-setup-perl from 1.42.0 to 1.43.1
---
updated-dependencies:
- dependency-name: shogo82148/actions-setup-perl
  dependency-version: 1.43.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-12 00:23:00 +00:00
Dirk WetterandGitHub 06adbdccc5 Merge pull request #3115 from testssl/dependabot/github_actions/shogo82148/actions-setup-perl-1.42.0
Bump shogo82148/actions-setup-perl from 1 to 1.42.0
2026-08-11 19:20:11 +02:00
Dirk WetterandGitHub e60c4b428f Merge pull request #3114 from testssl/dependabot/github_actions/docker/login-action-4.5.2
Bump docker/login-action from 4 to 4.5.2
2026-08-11 19:18:01 +02:00
Dirk WetterandGitHub b578b00440 Merge pull request #3117 from dcooper16/fixtypo
Fix typo
2026-08-11 19:13:38 +02:00
David CooperandGitHub 97e6258c85 Fix typo
It appears that #3084 accidentally introduced a typo in determine_service(). This commit undoes the change.
2026-08-10 15:44:45 -07:00
dependabot[bot]andGitHub 323141f2ba Bump shogo82148/actions-setup-perl from 1 to 1.42.0
---
updated-dependencies:
- dependency-name: shogo82148/actions-setup-perl
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-04 00:22:39 +00:00
dependabot[bot]andGitHub 2de44302c3 Bump docker/login-action from 4 to 4.5.2
Bumps [docker/login-action](https://github.com/docker/login-action) from 4 to 4.5.2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4...v4.5.2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-31 00:22:33 +00:00
Dirk WetterandGitHub 5296954a70 Merge pull request #3108 from testssl/fix_3107_fname-warning
Remove warning message when supplying a fname
2026-07-16 14:00:04 +02:00
Dirk WetterandGitHub 18e6938b62 Merge pull request #3110 from petecooper/3.3dev
Remove broken link to privacyscore.org in `3.3dev`
2026-07-16 13:57:43 +02:00
Pete Cooper 6fdfbc1800 remove broken link to privacyscore.org
ping https://github.com/testssl/testssl.sh/issues/3109
2026-07-16 12:37:27 +01:00
Dirk Wetter 498a0dff33 Remove warning message when supplying a fname
In order ot waran early in file outputs 75376d3 introduced a separate function for checking early
the command line.

As massing scanning option was not considered one got a warning, saying

   Warning: Target is not a server name: results may be completely wrong, at minimum trust may show false results.

This fixes that, see #3107 .
2026-07-16 11:25:30 +02:00