Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-10-31 13:55:25 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,631 Commits 17 Branches 35 Tags
0abca6f06754b2d7aac30003bde1f3c3d1951079
Commit Graph

4631 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk
0abca6f067 Mute socat killing & improve STARTTLS grading explanation 
Fixes #2582 .
 2024-10-15 10:56:29 +02:00
Dirk Wetter
ba51ca7879 Merge pull request #2587 from drwetter/fix_hexdump_docker 
Add link for hexdump correctly
 2024-10-15 09:57:08 +02:00
Dirk
fc309b7ee0 Add link for hexdump correctly 
... in Dockerfile, see #2586
 2024-10-15 09:54:35 +02:00
Dirk Wetter
5064d3073c Merge pull request #2584 from drwetter/upgradeDockerfile_Lep15.6 
Upgrade Dockerfile to leap 15.6
 2024-10-14 18:13:35 +02:00
Dirk Wetter
b7a4d5c692 Merge pull request #2583 from drwetter/minor_polish_unitTests 
Minor polish unit tests
 2024-10-14 18:08:35 +02:00
Dirk
0f44d6777a Upgrade Dockerfile to leap 15.6 
As EOL comes closer for openSUSE Leap 15.5 (https://en.opensuse.org/Lifetime)
an update is needed.

``busybox-util-linux`` and ``busybox-vi`` had to be removed as they don't exist
anymore. Busybox was added but hexdump was not provided by the vendor.
As busybox was compiled "properly" hexdump can be added by just linking to it.

This fixes #2563
 2024-10-14 17:51:24 +02:00
Dirk Wetter
656726eaab Merge pull request #2580 from drwetter/fix_2575 
Fix json/csv output when STARTTLS problem is passed back
 2024-10-14 17:16:09 +02:00
Dirk
e0e742379c see previous commit 2024-10-14 17:15:43 +02:00
Dirk
ae77349f3a see previous commit 2024-10-14 17:11:55 +02:00
Dirk
9b48c1641b Minor polish unit tests 
This PR (re-)names the unit test starter properly and improves for some unit tests the phrasing and formatting.
 2024-10-14 17:08:12 +02:00
Dirk
33fd749af8 Fix json/csv output when STARTTLS problem is passed back 
In rare cases testssl.sh writes in the terminal output "likely not offered" but
misses the "likely" in the json/csv output.

This fixes #2575 by adding that word and amending the return value 4 with
a comment.
 2024-10-14 16:15:18 +02:00
Dirk Wetter
fee04f2db8 Merge pull request #2579 from drwetter/merge_2568 
Merge 2568
 2024-10-14 15:55:40 +02:00
Dirk
fa5664f434 Polish comment + grade cap reason for STARTTLS 2024-10-14 14:17:02 +02:00
Dirk
7c0ccb3da7 Fix HTML output in #2568 2024-10-14 13:08:45 +02:00
Dirk
6c771f7902 Merge branch '3.1dev' of https://github.com/magnuslarsen/testssl.sh into magnuslarsen-3.1dev 2024-10-14 13:03:46 +02:00
Dirk Wetter
ddb84c27ce Merge pull request #2577 from drwetter/fix_f5_short_rfc1918 
Fix F5 cookie in 10.x.x.x.
 2024-10-12 19:30:19 +02:00
Dirk Wetter
6110843fd0 The F5 cookie decoder doesn't detect IPs in the 10.x.x.x space for non-encrypted cookies. 
This fixes the regex pattern, see also

https://github.com/drwetter/F5-BIGIP-Decoder/pull/4/files
 2024-10-09 15:47:50 +02:00
Dirk Wetter
541d3ff07a Merge pull request #2574 from drwetter/dependabot/github_actions/docker/build-push-action-6.9.0 
Bump docker/build-push-action from 6.8.0 to 6.9.0
 2024-10-01 10:15:12 +02:00
dependabot[bot]
89fe5ebe7e Bump docker/build-push-action from 6.8.0 to 6.9.0 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.8.0 to 6.9.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v6.8.0...v6.9.0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-01 00:08:37 +00:00
Dirk Wetter
93e5d3bcd1 Merge pull request #2573 from drwetter/dependabot/github_actions/docker/build-push-action-6.8.0 
Bump docker/build-push-action from 6.7.0 to 6.8.0
 2024-09-30 09:27:54 +02:00
dependabot[bot]
67fd81a9bf Bump docker/build-push-action from 6.7.0 to 6.8.0 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.7.0 to 6.8.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-30 00:49:02 +00:00
Dirk Wetter
94bbfff50c Merge pull request #2569 from DaanSelen/patch-1 
Minor English change
 2024-09-20 10:38:10 +02:00
dselen
53c07eff19 Confusion ensues 2024-09-20 10:20:58 +02:00
dselen
34ebe22e48 Minor English Readme.md changes 2024-09-20 10:19:21 +02:00
Magnus Larsen
69bdbeb982 feat(rating): line-wrapping comments for grade_cap_reasons 2024-09-18 09:08:07 +02:00
Dirk Wetter
92bc6d4873 Merge pull request #2565 from drwetter/automagic 
Amend docs wrt STARTTLS, clarify automagic switch for TLS 1.3 only hosts
 2024-09-08 14:49:58 +02:00
Dirk Wetter
04c5ee391d "only" was important here 2024-09-08 13:19:16 +02:00
Dirk Wetter
4ce91d7d61 Explain OSSL_SHORTCUT better, "automagically" is the word we wanted to use 2024-09-08 12:27:51 +02:00
Dirk Wetter
c5b07e7d99 Make the client side security clearer for STARTTLS 
... also in the man pages. See also #2564.
 2024-09-08 12:22:52 +02:00
Dirk Wetter
be3e7651bb Merge pull request #2564 from drwetter/starttls_phrasing 
Phrasing of reason for STARTTLS grading improved
 2024-09-07 17:08:50 +02:00
Dirk
3b85f53d52 added an accidently erased char 2024-09-07 16:15:03 +02:00
Dirk
a1c67c0794 proper English 2024-09-07 16:03:53 +02:00
Dirk
f9edaa7fe1 Phrasing of STARTTLS grading improved 
... a a comment added in the desciption.

Unfortunately I couldn't get the line wrapping working.
 2024-09-07 15:51:12 +02:00
Dirk Wetter
30f80cf9b3 Merge pull request #2561 from drwetter/fix_1312 
Fix 1312
 2024-09-06 18:55:24 +02:00
Dirk Wetter
9efe597a86 Merge pull request #2562 from drwetter/revert-2547-drwetter-patch-1 
Revert "Update Dockerfile to leap 15.6"
 2024-09-06 18:00:14 +02:00
Dirk Wetter
bb7d9f4ac5 Revert "Update Dockerfile to leap 15.6" 2024-09-06 17:53:58 +02:00
Dirk
733c2d31b7 Automagic with openssl and TLS 1.3-only host 2024-09-06 17:37:42 +02:00
Dirk
52213d3072 Suppy documenation for TLS 1.3 only hosts 
and the automagic wrt /usr/bin/openssl OPENSSL2 and OSSL_SHORTCUT
 2024-09-06 17:32:53 +02:00
Dirk
3d2bd5020c fix spellcheck 2024-09-06 13:00:27 +02:00
Dirk
12bc15adc3 misc 
- remove 1xLF in UI
- fix obsolete statment for OPENSSL2
 2024-09-06 12:53:00 +02:00
Dirk
becd310390 Address open UI problems for TLS 1.3 only hosts 
While in 3.2 there was only a hint how to deal with TLS 1.3 only hosts, a restart
with --openssl=/usr/bin/openssl or setting of OSSL_SHORTCUT-true was required.

This PR changes the behavior: if an openssl version can be found in /usr/bin/openssl
(or SUPPLIED via OPENSSL2=/home/version/ofopenssl testssl <cmdline>) which
supports TLS 1.3 it switches automatically and informs the user that it has done so.
   This message is asynchonous and is implemented with a new function check_msg()
and a global OPEN_MSG, so that we maintain the formatting. Otherwise it would have
appeared between rDNS and service detection. Now it's nicely after service detection.
 2024-09-06 12:47:03 +02:00
Dirk Wetter
a20fd796e8 Merge pull request #2552 from drwetter/fix_2466 
Trailing space after value in header is fine
 2024-09-03 20:51:18 +02:00
Dirk Wetter
031c2a55ec Merge pull request #2553 from drwetter/noCtrlCharInHeader 
Remove crtl chars from HTTP header
 2024-09-03 20:50:18 +02:00
Dirk Wetter
3cd027e1f1 Merge pull request #2551 from drwetter/banner 
Improve banner (3.2)
 2024-09-03 19:27:46 +02:00
Dirk
2b36b33112 Remove crtl chars from HTTP header 
... which fixes #2337
 2024-09-03 19:24:46 +02:00
Dirk
30a33e9a6e Trailing space after value in header is fine 
This fixes #2466.
 2024-09-03 19:10:29 +02:00
Dirk
dbb8fc8013 Fix CI 2024-09-03 18:28:56 +02:00
Dirk
408e8f84f4 modify issue template for bash version 2024-09-03 15:42:54 +02:00
Dirk
5a1fd2623f Improve banner (3.2) 
... for readability and bugs to be filed (fixes #2506)

This PR defines a short string for the OpenSSL banner as some suppliers have made them (unnecessarily) long so that it won't fit nice in the banner anymore.

The banner also now omits the built line from openssl as for the user it is normally not important.
 2024-09-03 15:40:55 +02:00
Dirk Wetter
e59a0f202f Merge pull request #2549 from drwetter/drwetter-patch-1 
Ignore Dockerfile.git
 2024-09-03 12:46:28 +02:00