Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 05:38:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,944 Commits 17 Branches 39 Tags
05fb3c3fe96a6e44d2479cef6532ce0d06bfd522
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub 05fb3c3fe9 Identation 2025-05-17 16:20:40 +02:00
Dirk WetterandGitHub d0aa6fa84d Update Readme.md 
More badges
 2025-05-17 16:19:42 +02:00
Dirk WetterandGitHub 7df43ea752 More badges 
see https://shields.io/badges
 2025-05-16 19:06:24 +02:00
Dirk WetterandGitHub ce6cdfea75 Merge pull request #2774 from testssl/ubuntu_runner 
Update / rename runner to be in sync w Mac runner
 2025-05-16 18:05:34 +02:00
Dirk cbd15020e2 Change reference to badge 2025-05-16 17:59:00 +02:00
Dirk 5e248c05dc Update / rename runner to be in sync w Mac runner 2025-05-16 17:50:33 +02:00
Dirk WetterandGitHub 6aa1c58c34 Merge pull request #2773 from testssl/drwetter-patch-1 
Dockerfile
 2025-05-16 16:11:46 +02:00
Dirk WetterandGitHub 3977057a1e Update unit_tests.yml 
Dockerfile.alpine here
 2025-05-16 16:11:22 +02:00
Dirk WetterandGitHub bc4a1ab402 Merge pull request #2772 from Tazmaniac/docker-fix 
Lowercase the repository name.
 2025-05-16 09:20:14 +02:00
Dirk WetterandGitHub afbbb0f2c1 Merge pull request #2770 from polarathene/patch-3 
ci(fix): Docker workflow `build-args` input should be a string
 2025-05-12 13:44:47 +02:00
Dirk WetterandGitHub 68c148dabe Merge pull request #2768 from polarathene/fix/ci-docker-3.2 
ci(fix): 3.2 - Docker support adjustments
 2025-05-12 12:15:11 +02:00
Dirk WetterandGitHub 7f48b5ffed Merge pull request #2766 from testssl/drwetter-patch-1 
Add DeepWiki doc
 2025-05-09 12:57:18 +02:00
Dirk WetterandGitHub 9e89129e4f Add DeepWiki doc 2025-05-09 12:56:35 +02:00
Dirk WetterandGitHub f44464408d Merge pull request #2764 from vinny-pereira/dev 
Fix missing line feed in run_breach() failure output
 2025-05-09 09:36:45 +02:00
Dirk WetterandGitHub a57a92fa1a Merge pull request #2762 from testssl/android15 
Add Android15 handshake simulation
 2025-05-08 23:35:05 +02:00
Dirk 2557d2151b Add line 2025-05-08 18:49:51 +02:00
Dirk 35743166cd Clarify what Android handshake (best) is 2025-05-08 17:21:19 +02:00
Dirk 55980c59c3 Add Android 15 handshake 2025-05-08 17:20:15 +02:00
Dirk WetterandGitHub 927a274e95 Merge pull request #2760 from ssupdoc/fix_2759 
Uses tolower() utility for hostname conversion
 2025-05-08 12:38:29 +02:00
Dirk WetterandGitHub 760781068d Merge pull request #2758 from polarathene/patch-2 
ci: `Dockerfile` - Support local and git builds with the openSUSE Leap image
 2025-05-08 11:25:30 +02:00
Dirk WetterandGitHub 5719fccc93 Merge pull request #2757 from sullo/3.2 
Lowercase URL to match 'HTTPS://<server>/'
 2025-05-06 09:51:06 +02:00
Dirk WetterandGitHub 70fd83f6a9 Merge pull request #2756 from testssl/docker_alpine 
Change filename to -alpine / upgrade Ubuntu
 2025-05-05 22:08:17 +02:00
Dirk f09f742ee3 fix gh action 
Not sure why this has been triggered though.

 #   Failed test 'Check whether CSV output matches baseline file from testssl.sh'
 #   at t/61_diff_testsslsh.t line 57.
 #
 # %s
 # @@ -1,5 +1,4 @@
 #  "id","fqdn/ip","port","severity","finding","cve","cwe"
 # -"engine_problem","/","443","WARN","No engine or GOST support via engine with your ./bin/openssl.Linux.x86_64","",""
 #  "service","testssl.sh/81.169.166.184","443","INFO","HTTP","",""
 #  "pre_128cipher","testssl.sh/81.169.166.184","443","INFO","No 128 cipher limit bug","",""
 #  "SSLv2","testssl.sh/81.169.166.184","443","OK","not offered","",""
 # Looks like you failed 1 test of 1.
 t/61_diff_testsslsh.t ..............
 2025-05-05 20:11:12 +02:00
Dirk 74a261d2f0 remove file 2025-05-05 13:25:25 +02:00
Dirk 84da656683 Change Dockerfile.git to -alpine / upgrade Ubuntu 2025-05-05 13:24:57 +02:00
Dirk 286bc150db rename file 2025-05-05 13:23:06 +02:00
Dirk 1400c7875d Change filename to -alpine / upgrade Ubuntu 2025-05-05 13:16:41 +02:00
Dirk WetterandGitHub 252cee6207 Merge pull request #2752 from polarathene/patch-1 
refactor: Docker (Alpine) improvements
 2025-05-05 12:15:08 +02:00
Dirk WetterandGitHub 3a9746ccc5 Merge pull request #2749 from testssl/revert-2748-docker.ghcr 
Revert "Trying to use the regular Dockerfile ...."
 2025-04-25 18:45:41 +02:00
Dirk WetterandGitHub f00af62d9b Revert "Trying to use the regular Dockerfile ...." 2025-04-25 18:22:14 +02:00
Dirk WetterandGitHub 3fd3470e49 Merge pull request #2747 from testssl/dependabot/github_actions/docker/build-push-action-6.16.0 
Bump docker/build-push-action from 6.15.0 to 6.16.0
 2025-04-25 18:19:21 +02:00
Dirk WetterandGitHub 81e28b9a96 Merge pull request #2748 from testssl/docker.ghcr 
Trying to use the regular Dockerfile ....
 2025-04-25 17:43:50 +02:00
Dirk 2a428f1871 Trying to use the regular Dockerfile .... 
.. for GHCR.

See comment https://github.com/testssl/testssl.sh/issues/2348#issuecomment-2828960763
from @polarathene.

Probably the Dockerfile.git is not in use but I'd rather wait before removing it.
 2025-04-25 16:18:22 +02:00
Dirk WetterandGitHub 06ba579475 Merge pull request #2742 from testssl/bump_version 
Prepare for upcoming release
 2025-04-23 11:33:39 +02:00
Dirk WetterandGitHub 51a21cb5f1 Merge pull request #2744 from testssl/fix_imagebuild 
Remove redundant commands in Dockerfile
 2025-04-23 11:07:23 +02:00
Dirk 622fe3f7b1 fix typos 2025-04-22 17:48:32 +02:00
Dirk ca57914bd0 Reflect release status in Readme.md 
... and amend / rearranged a few sentences
 2025-04-22 17:45:56 +02:00
Dirk WetterandGitHub a9a1295875 Merge pull request #2745 from testssl/amend_changelog_and_credits 
Amend changes and attributions
 2025-04-22 16:50:53 +02:00
Dirk 4d10873727 Amend changes and attributions 2025-04-22 16:47:54 +02:00
Dirk WetterandGitHub 58da779a8e Merge pull request #2721 from testssl/fix_some_ipv6proxy_issues 
Fix some ipv6proxy issues
 2025-04-22 15:05:05 +02:00
Dirk e30b558860 Remove redundant commands 
.. see https://github.com/testssl/testssl.sh/issues/2420#issuecomment-1762749767

As suggested by @polarathene the not needed repos are more elegantly removed,
commands for removing util-linux removal and zypper up were redudant and thus
squashed.

First stage was build manually and it looked fine.

This fixes #2439 .
 2025-04-22 13:28:30 +02:00
Dirk ffe5dea844 remove misleading command 2025-04-22 12:55:42 +02:00
Dirk b4cdc37f9e trailing zero sounds better / is more distinguishable 2025-04-22 12:47:48 +02:00
Dirk 295a68e7ab Just bump version for upcoming release 2025-04-18 13:32:53 +02:00
Dirk WetterandGitHub 6746fa54b8 Merge pull request #2740 from testssl/update_CAs 
Update CA stores for 3.2
 2025-04-18 13:17:50 +02:00
Dirk d1440d646d For better autoselction w mouse move comma 2025-04-17 18:50:48 +02:00
Dirk 668b98c9ce remove DST Root CA X3.txt 2025-04-17 18:41:44 +02:00
Dirk 3dad99a93a Update Java, Apple and MS store 
- Java is from JDK 21
- Apple and MS from this week
 2025-04-17 18:39:02 +02:00
Dirk 41c3110c0e Update Linux and Mozilla CA store 
- Linux: Debian 12
- Mozilla from 2025-02-25
 2025-04-17 18:03:50 +02:00
Dirk WetterandGitHub 128d8b5997 Merge pull request #2731 from testssl/new_Handshakes 
Update handshakes
 2025-04-17 16:13:31 +02:00
Dirk ebb7cf558e Update handshake 2025-04-16 21:48:30 +02:00
Dirk 81e4856b79 fix typo 2025-04-16 21:35:27 +02:00
Dirk 4a2228f401 Updating Android handshakes 
- Android 13 and 14 were added. They are the same, see ja3 + ja4 value
- as it turned out Android 11 and 12 have also the same ja3 + ja4 values (retrieved from old pcap files)
- so both will be labeled 11/12 an 13/14
- old pcaps from Android 11/12 showed no ALPN --> corrected
 2025-04-16 21:28:08 +02:00
Dirk WetterandGitHub a701541318 Merge pull request #2735 from dcooper16/tls13_pq_kx 
Support decrypting TLS 1.3 handshakes with PQ key exchange
 2025-04-11 12:22:25 +02:00
Dirk WetterandGitHub 459ccee589 Merge pull request #2737 from dcooper16/tls13_pq_sigalg 
Support ML-DSA server keys
 2025-04-10 20:49:29 +02:00
Dirk WetterandGitHub 3fbceada58 Merge pull request #2736 from testssl/rm_krb 
Remove KRB cipher info
 2025-04-10 13:23:16 +02:00
Dirk 7b6a7d7ade Remove KRB cipher info 2025-04-10 13:22:09 +02:00
Dirk WetterandGitHub 04a592307a Merge pull request #2732 from dcooper16/supported_cuves_list 
Get supported groups list from OpenSSL 3.5.0
 2025-04-10 09:57:20 +02:00
Dirk fdb2da80d6 fix typo 2025-04-09 20:35:44 +02:00
Dirk 5d9d5276e3 Firefox 137 (Win 11) 2025-04-09 20:28:31 +02:00
Dirk 51fce5feb1 fix ja3/4 for Edge 133 Win 11 23H2 2025-04-09 20:18:24 +02:00
Dirk b18dd2aa28 Edge 133 Win 11 23H2 2025-04-09 20:14:42 +02:00
Dirk 647aeae205 Update docu and (futile) perl script 2025-04-09 20:00:47 +02:00
Dirk f337f53e49 Reorder Java 8 2025-04-09 19:40:12 +02:00
Dirk 85232b7bc5 Chromium 137 Win 11 2025-04-09 19:31:35 +02:00
Dirk WetterandGitHub 8b1339b29d Merge pull request #2734 from PeterDaveHello/FixDockerHubReadmeBadge 
Fix Docker Hub badge in Readme.md
 2025-04-09 18:51:08 +02:00
Dirk 84e77d2bb0 Java 21 2025-04-09 17:07:19 +02:00
Dirk 31e2f43eec LibreSSL update 3.3.6 (MacOS) 
.. renaming that to macOS instead "Apple".
 2025-04-09 16:51:26 +02:00
Dirk 4f696f94df Add openssl 3.0.15 (from Debian) 
... and set OpenSSL 3.0.3 (git) as not to list
 2025-04-09 16:39:05 +02:00
Dirk e4cdca9e63 Add Safari 18.4 @ MacOS 15.4 2025-04-09 15:53:11 +02:00
Dirk d601f33a37 Merge branch '3.2' into new_Handshakes 2025-04-09 10:59:40 +02:00
Dirk WetterandGitHub bc0c9f9c4b Merge pull request #2733 from dcooper16/ossl35_client_sim 
OpenSSL 3.5.0 client simulation
 2025-04-09 10:46:20 +02:00
Dirk 0d7c33ab7f deprecate more 
- Safari 12.1 (iOS 12.2)
- Firefox 66 (Win 8.1/10)
 2025-04-08 16:14:37 +02:00
Dirk 887653a033 Deprecate a few entries ... 
- Android 5+6
- Chrome 79 Win 10
- IE 6 XP
- IE 8 XP
- Safari 13.0 (macOS 10.14.6)
- OpenSSL 1.1.0l (Debian)

... before new ones are added
 2025-04-08 16:06:55 +02:00
Dirk 7939144af1 Swap Android 6 for Android 5 
... as it seems to habe more market share
 2025-04-08 15:49:44 +02:00
Dirk 58ddfd8a24 Add hint for JA3/4 
+ minor corrections
 2025-04-07 19:38:05 +02:00
Dirk 45be26db7c Add Java 8u442 handshake 
Also the ja3 and ja4 values were added as retrieved from wireshark.

See also #2430 .
 2025-04-07 19:36:34 +02:00
Dirk WetterandGitHub 06682990ba GHCR clearer 2025-04-06 20:29:18 +02:00
Dirk WetterandGitHub f7f35fe4c6 Merge pull request #2729 from testssl/ghcr.io-doc 
Add minimal doc for GHCR
 2025-04-06 18:29:07 +02:00
Dirk Wetter ac0419eaad Add minimal doc for GHCR 2025-04-06 18:27:37 +02:00
Dirk WetterandGitHub b20add1d12 Merge pull request #2684 from testssl/new_binaries 
Start working on a set of new binaries
 2025-04-04 14:15:00 +02:00
Dirk WetterandGitHub b7f9ff1bf2 Merge pull request #2727 from dcooper16/chacha20 
ChaCha20 decryption
 2025-04-04 11:54:05 +02:00
Dirk WetterandGitHub be9a85c1f7 Merge pull request #2726 from dcooper16/fix_has_uds_checks 
Fix checks with HAS_UDS and HAS_UDS2
 2025-04-02 21:47:41 +02:00
Dirk Wetter 44d9f520fb Add check for proxy IPv6 support 
... of the binary. Testing needs to be done.
 2025-04-01 23:37:54 +02:00
Dirk 672d253981 Fix typo 2025-04-01 18:58:12 +02:00
Dirk b149fc4da4 Reorder, rephrase, timing 
Also provide a runtime table, from a little research.
 2025-04-01 15:24:40 +02:00
Dirk 45a264e4e4 Fix typo 2025-03-31 18:08:27 +02:00
Dirk f55abf56af Add new 64 Bit binaries (Linux, FreeBSD) 
... from https://github.com/testssl/openssl-1.0.2.bad .
 2025-03-31 17:54:40 +02:00
Dirk 093e8ddd10 Remove redundant statements 2025-03-31 17:54:01 +02:00
Dirk WetterandGitHub 2dfd192f27 Typos / when needed 2025-03-30 19:59:23 +02:00
Dirk 3a414d60bf Comment the removal of binaries 2025-03-30 18:14:41 +02:00
Dirk f208c09803 Rename file 2025-03-30 18:11:21 +02:00
Dirk 0e765986dc Remove output from openssl Kerberos binary 
... as we don't supply the kerberos binary anymore
 2025-03-30 18:08:58 +02:00
Dirk 1852ef6a1d Remove 32 Bit Linux binary 
... as it is a niche thing. It might be available @ the contibuted
build directory @ https://testssl.sh
 2025-03-30 18:06:58 +02:00
Dirk 5a1d90f310 Fix link 2025-03-28 18:33:14 +01:00
Dirk Wetter 87edb78b3e Add docu for IPv6 proxy 2025-03-27 18:27:00 +01:00
Dirk Wetter 36a58e2b3e Allow square bracket notation for IPv6 proxy 2025-03-27 18:26:17 +01:00
Dirk WetterandGitHub a348839f60 Merge pull request #2720 from testssl/add_comment_get_server_cert 
Comment the first lines get_server_certificate()
 2025-03-25 21:56:32 +01:00
Dirk Wetter e81b09176d Distunguish between LibreSSL and OpenSSL IPv6 proxy 
Somehow the proxy now shows only IPv6 source addresses when specifying
--proxy=IPV6ADDRESS:PORT
 2025-03-25 19:42:54 +01:00
Dirk Wetter 18da1b8df5 Fix some IPv6 proxy issues 
As a quick hack this PR enables *basically* the IPv6 proxy which results that testssl.sh
will use an IPv6 proxy when

* the binary supports that
* the binary is used an not tls_sockets()
* there's no A record but an AAAA record of the proxy or an IPv6 address as proxy address was specified.

The latter should guarantee that it doesn't break anything.

However tls_sockets() still uses IPv4 for the connection to the proxy.

See #1105
 2025-03-25 19:13:30 +01:00