3c39396391
Unreadable SAN list on FreeBSD
...
On FreeBSD, sed does not support "\n" in the replacement string of a substitution. The SANs are currently output all together inside a single pair of quotes and each separated with an "n" character, needless to say this is very difficult to read.
After a little digging, it seems this is a somewhat recent regression of the fix in #173 . I believe `tr` would be a more cross-platform way to do this, and several sources (including the author of that PR) would seem to agree - assuming the newline is now necessary.
It doesn't appear to matter what order the newline replacement happens amongst all the other replacements, so I have placed it first simply to avoid extending any already-long lines. Please correct me if this deduction is false.
2016-07-11 13:35:55 +01:00
018468a670
more user friendly...
2016-07-09 14:24:38 +02:00
f216cbe61f
Merge branch 'master' into version_negotiation
2016-07-08 09:39:12 -04:00
02a39e4859
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-07-08 09:38:06 -04:00
788042ba37
Merge branch 'master' into more_sslv2_sslv3_fixes
2016-07-08 09:35:52 -04:00
eb58598ca5
make it public, see #122
2016-07-08 11:40:17 +02:00
af4117aa7a
FIX #404
2016-07-08 11:25:41 +02:00
8c11334030
FIX #405
2016-07-08 11:15:41 +02:00
57bf01a360
Merge pull request #402 from dcooper16/poodle
...
Check for all CBC ciphers in Poodle test
2016-07-08 10:04:49 +02:00
9c92a866e0
Update Readme.md
2016-07-08 08:04:58 +02:00
345087c3a4
Merge pull request #403 from teward/patch-1
...
Missing closing parenteses in help output for --openssl
2016-07-06 20:45:45 +02:00
de05711e5a
Fix grammar issue in help output for --openssl
...
Missing a closing parentheses `)`.
2016-07-06 14:23:32 -04:00
ec6c0ce605
Check for all CBC ciphers in Poodle test
...
This PR should address issue #399 .
I created the list of ciphers using the CIPHERS_BY_STRENGTH file from PR #373 , making a list of all ciphers that had "CBC" in the RFC name and for which I had been able to find a corresponding OpenSSL name. Then, since that list contained more than 128 ciphers, I removed any ciphers from the list where the name ended in "-SHA256" or "-SHA384", as it is my understanding that those ciphers can only be used with TLS 1.2.
2016-07-06 10:52:54 -04:00
02fb4ef9ca
Debug begone
2016-07-06 00:12:48 +02:00
845e6c13a3
And we have unit tests too (and found some bugs in the process)
2016-07-05 23:55:19 +02:00
95e42b2fdf
Better displaying of findings
2016-07-05 23:33:20 +02:00
5ea49c1433
Merge branch 'master' of https://github.com/drwetter/testssl.sh into feature/ca-pinning
2016-07-05 18:15:46 +02:00
07f91a54bf
Fixed the encoding for root/intermediate CAs now.
2016-07-05 18:10:36 +02:00
b6accbe737
Merge branch 'master' into version_negotiation
2016-07-05 10:24:53 -04:00
1102ef324c
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-07-05 10:23:13 -04:00
6ec00c33db
Merge branch 'master' into more_sslv2_sslv3_fixes
...
Conflicts:
testssl.sh
2016-07-05 10:19:53 -04:00
0217992553
fixed error where an URI in X509v3 Issuer Alternative Name was displayed and an URI in SAN
2016-07-05 00:08:51 +02:00
d2f2dab7fb
fix regression lf in CN
2016-07-05 00:02:34 +02:00
2bba19360f
see #401 , part 2
2016-07-04 23:52:52 +02:00
251e3f9a3b
Merge pull request #371 from dcooper16/fix_issue_276
...
Fix issue #276
2016-07-04 23:25:13 +02:00
0b5705fff4
FIX #258 , FIX #398
...
partly addressed: #246
2016-07-04 23:05:12 +02:00
e280cac2af
Without bash-bsd check
2016-07-04 17:30:32 +02:00
4efb6531c2
Merge branch 'master' of https://github.com/drwetter/testssl.sh into issues/258
2016-07-04 17:28:06 +02:00
3049425740
Checks for CA and intermediate pins too. Need to clean up output and write unit tests
2016-07-04 17:25:48 +02:00
a648470988
Not done yet, but the basic code is working
2016-07-04 17:21:24 +02:00
f01bff973a
renamed function, better banner for logging
2016-07-04 13:59:39 +02:00
491a03233b
updating neat_list() to be faster and more compatible to openssl 1.1.0 with new chacha/poly ciphers
2016-07-03 22:35:21 +02:00
d5242c255e
FIX #384
2016-07-03 21:45:49 +02:00
946506f3ac
This Fixes #258 - Checks if /dev/fd is mounted on FreeBSD
2016-07-03 19:52:48 +02:00
37b33c9d79
Merge branch 'master' of github.com:drwetter/testssl.sh
2016-07-01 18:26:20 +02:00
32f249b0c2
enabling sockets for client testing per default #375
2016-07-01 18:26:05 +02:00
0d2797e5a0
travis ci icon
2016-07-01 14:58:54 +02:00
1e9863823c
Merge branch 'master' of github.com:drwetter/testssl.sh
2016-07-01 12:04:21 +02:00
2362cd8745
wording for GOST sig algos and keys
2016-07-01 12:03:46 +02:00
0af62efb4f
Merge branch 'master' into version_negotiation
2016-06-29 11:03:45 -04:00
a534b8de5f
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-06-29 11:02:14 -04:00
df55d4af51
Merge branch 'master' into more_sslv2_sslv3_fixes
2016-06-29 09:57:38 -04:00
53dec241f1
Merge branch 'master' into fix_issue_276
2016-06-29 09:56:08 -04:00
aed0a8475a
Merge pull request #396 from seccubus/unit-tests
...
Pull request that helps to enable travis CI integrations
2016-06-29 09:53:51 +02:00
ec9276c17d
Serach and replace failure, fixed now
2016-06-29 00:38:51 +02:00
23ef87c134
Making tests work correctly
2016-06-29 00:35:52 +02:00
ac7dd4da79
CBC isn't done yet. Unit tests count themselves now
2016-06-29 00:24:57 +02:00
0e8f69e6ac
Merge branch 'master' into unit-tests
2016-06-29 00:16:36 +02:00
fa19ac168f
Be more verbose in your error testing
2016-06-29 00:15:32 +02:00
353756ffd6
We need dnsutils as well
2016-06-29 00:12:46 +02:00
Will Elwood
Dirk Wetter
David Cooper
Thomas Ward
Frank Breedijk