Commit Graph

4907 Commits

Author SHA1 Message Date
1400c7875d Change filename to -alpine / upgrade Ubuntu 2025-05-05 13:16:41 +02:00
252cee6207 Merge pull request #2752 from polarathene/patch-1
refactor: Docker (Alpine) improvements
2025-05-05 12:15:08 +02:00
0b4b2d9ffc chore: Dockerfile.git - Remove apk update 2025-05-01 14:54:58 +12:00
e0c3502676 refactor: Docker (Alpine) improvements
60MB => 38MB (dist-git) or 30MB (dist-local)
2025-05-01 14:42:21 +12:00
3a9746ccc5 Merge pull request #2749 from testssl/revert-2748-docker.ghcr
Revert "Trying to use the regular Dockerfile ...."
2025-04-25 18:45:41 +02:00
f00af62d9b Revert "Trying to use the regular Dockerfile ...." 2025-04-25 18:22:14 +02:00
3fd3470e49 Merge pull request #2747 from testssl/dependabot/github_actions/docker/build-push-action-6.16.0
Bump docker/build-push-action from 6.15.0 to 6.16.0
2025-04-25 18:19:21 +02:00
81e28b9a96 Merge pull request #2748 from testssl/docker.ghcr
Trying to use the regular Dockerfile ....
2025-04-25 17:43:50 +02:00
2a428f1871 Trying to use the regular Dockerfile ....
.. for GHCR.

See comment https://github.com/testssl/testssl.sh/issues/2348#issuecomment-2828960763
from @polarathene.

Probably the Dockerfile.git is not in use but I'd rather wait before removing it.
2025-04-25 16:18:22 +02:00
abd2650766 Bump docker/build-push-action from 6.15.0 to 6.16.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.15.0 to 6.16.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v6.15.0...v6.16.0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-25 00:28:49 +00:00
06ba579475 Merge pull request #2742 from testssl/bump_version
Prepare for upcoming release
v3.2.0
2025-04-23 11:33:39 +02:00
51a21cb5f1 Merge pull request #2744 from testssl/fix_imagebuild
Remove redundant commands in Dockerfile
2025-04-23 11:07:23 +02:00
622fe3f7b1 fix typos 2025-04-22 17:48:32 +02:00
ca57914bd0 Reflect release status in Readme.md
... and amend / rearranged a few sentences
2025-04-22 17:45:56 +02:00
a9a1295875 Merge pull request #2745 from testssl/amend_changelog_and_credits
Amend changes and attributions
2025-04-22 16:50:53 +02:00
4d10873727 Amend changes and attributions 2025-04-22 16:47:54 +02:00
58da779a8e Merge pull request #2721 from testssl/fix_some_ipv6proxy_issues
Fix some ipv6proxy issues
2025-04-22 15:05:05 +02:00
e30b558860 Remove redundant commands
.. see https://github.com/testssl/testssl.sh/issues/2420#issuecomment-1762749767

As suggested by @polarathene the not needed repos are more elegantly removed,
commands for removing util-linux removal and zypper up were redudant and thus
squashed.

First stage was build manually and it looked fine.

This fixes #2439 .
2025-04-22 13:28:30 +02:00
ffe5dea844 remove misleading command 2025-04-22 12:55:42 +02:00
b4cdc37f9e trailing zero sounds better / is more distinguishable 2025-04-22 12:47:48 +02:00
295a68e7ab Just bump version for upcoming release 2025-04-18 13:32:53 +02:00
6746fa54b8 Merge pull request #2740 from testssl/update_CAs
Update CA stores for 3.2
2025-04-18 13:17:50 +02:00
d1440d646d For better autoselction w mouse move comma 2025-04-17 18:50:48 +02:00
668b98c9ce remove DST Root CA X3.txt 2025-04-17 18:41:44 +02:00
3dad99a93a Update Java, Apple and MS store
- Java is from JDK 21
- Apple and MS from this week
2025-04-17 18:39:02 +02:00
41c3110c0e Update Linux and Mozilla CA store
- Linux: Debian 12
- Mozilla from 2025-02-25
2025-04-17 18:03:50 +02:00
128d8b5997 Merge pull request #2731 from testssl/new_Handshakes
Update handshakes
2025-04-17 16:13:31 +02:00
ebb7cf558e Update handshake 2025-04-16 21:48:30 +02:00
81e4856b79 fix typo 2025-04-16 21:35:27 +02:00
4a2228f401 Updating Android handshakes
- Android 13 and 14 were added. They are the same, see ja3 + ja4 value
- as it turned out Android 11 and 12 have also the same ja3 + ja4 values (retrieved from old pcap files)
- so both will be labeled 11/12 an 13/14
- old pcaps from Android 11/12 showed no ALPN --> corrected
2025-04-16 21:28:08 +02:00
a701541318 Merge pull request #2735 from dcooper16/tls13_pq_kx
Support decrypting TLS 1.3 handshakes with PQ key exchange
2025-04-11 12:22:25 +02:00
d1531cdf60 Support decrypting TLS 1.3 handshakes with PQ key exchange
This commit modifies testssl.sh so that TLS 1.3 handshakes that use post-quantum algorithms for key exchange can be decrypted, if $OPENSSL supports the algorithms.
2025-04-10 14:05:30 -07:00
459ccee589 Merge pull request #2737 from dcooper16/tls13_pq_sigalg
Support ML-DSA server keys
2025-04-10 20:49:29 +02:00
ecaa7878e5 Support ML-DSA server keys
This commit adds support for server certificates that have ML-DSA pubilc keys. It also adds supports for certificates that are signed with ML-DSA or SLH-DSA. The ML-DSA code points for the signature_algorithms extension are taken from https://datatracker.ietf.org/doc/draft-tls-westerbaan-mldsa/ and are the ones used by OpenSSL 3.5.0.
2025-04-10 09:15:04 -07:00
3fbceada58 Merge pull request #2736 from testssl/rm_krb
Remove KRB cipher info
2025-04-10 13:23:16 +02:00
7b6a7d7ade Remove KRB cipher info 2025-04-10 13:22:09 +02:00
04a592307a Merge pull request #2732 from dcooper16/supported_cuves_list
Get supported groups list from OpenSSL 3.5.0
2025-04-10 09:57:20 +02:00
fdb2da80d6 fix typo 2025-04-09 20:35:44 +02:00
5d9d5276e3 Firefox 137 (Win 11) 2025-04-09 20:28:31 +02:00
51fce5feb1 fix ja3/4 for Edge 133 Win 11 23H2 2025-04-09 20:18:24 +02:00
b18dd2aa28 Edge 133 Win 11 23H2 2025-04-09 20:14:42 +02:00
647aeae205 Update docu and (futile) perl script 2025-04-09 20:00:47 +02:00
f337f53e49 Reorder Java 8 2025-04-09 19:40:12 +02:00
85232b7bc5 Chromium 137 Win 11 2025-04-09 19:31:35 +02:00
8b1339b29d Merge pull request #2734 from PeterDaveHello/FixDockerHubReadmeBadge
Fix Docker Hub badge in Readme.md
2025-04-09 18:51:08 +02:00
9f48c51dc7 Get supported groups list from OpenSSL 3.5.0
In OpenSSL 3.5.0 the `list` command can be used to obtain a list of supported groups for TLS. The commit makes use of this command when $OPENSSL is OpenSSL 3.5.0 or later. This should be faster than testing curves one at a time.
2025-04-09 09:21:54 -07:00
84e77d2bb0 Java 21 2025-04-09 17:07:19 +02:00
31e2f43eec LibreSSL update 3.3.6 (MacOS)
.. renaming that to macOS instead "Apple".
2025-04-09 16:51:26 +02:00
4f696f94df Add openssl 3.0.15 (from Debian)
... and set OpenSSL 3.0.3 (git) as not to list
2025-04-09 16:39:05 +02:00
e4cdca9e63 Add Safari 18.4 @ MacOS 15.4 2025-04-09 15:53:11 +02:00