Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,633 Commits 16 Branches 39 Tags
208efdc68a0aef2603d3202ad093b9aebef7968e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub 208efdc68a Merge pull request #2452 from drwetter/update_hashes_3.0 
Update hashes for HPKP
 2023-12-24 15:33:28 +01:00
Dirk 0de86283e9 Update hashes for HPKP 2023-12-24 13:57:48 +01:00
Dirk WetterandGitHub 0de609da8c Merge pull request #2451 from drwetter/fix_stupid_umaskerror_3.0 
Bail out if user error bc of umask (3.0 branch)
 2023-12-24 11:12:29 +01:00
Dirk Wetter 02220d2fc4 Bail out if user error bc of umask (3.0 branch) 
Implemnation for 3.0, 3.2 see #2450

If a user chose a broken umask testssl.sh will start but emits subsequent errors.
This patch adds two sanity checks whether it is allowed to create and read files in the temp directory.

Fixes #2449
 2023-12-24 10:21:11 +01:00
Dirk WetterandGitHub 68dec54cc5 Merge pull request #2435 from drwetter/fix_2431_grepProb 
Amend fix for newer grep versions
 2023-10-30 20:29:59 +01:00
Dirk a0c0c73b66 Amend fix for newer grep versions 
See also PR #2243, issue #2241

Removes unneeded escape for exclamation mark. This is for 3.0.
3.2 has the fix already.
 2023-10-30 19:07:06 +01:00
Dirk WetterandGitHub 40c6be790b Merge pull request #2434 from drwetter/fix_2429_3.0 
Fix weird bash globbing (3.0)
 2023-10-30 17:53:19 +01:00
Dirk 41c697f232 put the redirection in the right spot 2023-10-30 15:25:38 +01:00
Dirk 775ed60437 Fix weird bash globbing (3.0) 
What was problematic was the error message when the certificate stores were missing. This fixes it by redirecting the error message to /dev/null so that if the sub function detects the missing file it returns with an error by the program and not by executing "basename"

As for 3.2 this is for the 3.0 branch.
 2023-10-30 15:20:37 +01:00
Dirk WetterandGitHub 7df05511da Merge pull request #2426 from drwetter/drwetter-patch-2 
Sync GHCR with Dockerfile
 2023-10-30 14:41:12 +01:00
Dirk WetterandGitHub 382c1530cb Sync GHCR with Dockerfile 2023-10-13 17:38:09 +02:00
Dirk WetterandGitHub 3eb3994d39 Merge pull request #2421 from drwetter/alpine_3.18 
Update Dockerfile to Alpine 3.18
 2023-10-13 10:43:56 +02:00
Dirk WetterandGitHub cd6659c7ad Update Dockerfile to Alpine 3.18 
for an extension of life time:

https://endoflife.date/alpine
 2023-10-12 09:59:25 +02:00
Dirk WetterandGitHub ece9447ac4 Merge pull request #2412 from drwetter/fix_extended_regexp3.0 
Fix regexp in STARTTLS detection
 2023-10-07 17:21:25 +02:00
Dirk c09e1587b7 fix spell errors 2023-10-07 15:15:04 +02:00
Dirk c31b9492ce Fix regexp in STARTTLS detection 
see also #2411, kudo to Geert!
 2023-10-07 15:06:36 +02:00
Dirk WetterandGitHub e9cd8c3afd Merge pull request #2391 from Tazmaniac/Renego-backport-patch 
Backport pull request #2360 to fix #2389
 2023-09-08 19:20:38 +02:00
Dirk WetterandGitHub 5cb30aa510 Merge pull request #2342 from drwetter/openssl_link_docker_3.0 
make openssl 1.1 available via /usr/bin/openssl
 2023-03-20 14:29:14 +01:00
Dirk f65b81837c make openssl 1.1 available via /usr/bin/openssl 2023-03-20 14:19:35 +01:00
Dirk WetterandGitHub 4c54464ab8 Merge pull request #2341 from drwetter/fix_nss_dns_3.0 
Modify Dockerfile.git also, amending #2340
 2023-03-20 13:42:59 +01:00
Dirk Wetter bf88b8b443 Modify Dockerfile.git also, amending #2340 2023-03-19 22:57:58 +01:00
Dirk WetterandGitHub 6454f656db Merge pull request #2340 from drwetter/fix_nss_dns_3.0 
Add openssl, offer to query OCSP responder (3.0)
 2023-03-19 22:52:33 +01:00
Dirk Wetter 8759ac61af Add openssl, offer to query OCSP responder 
This PR includes two tweaks:

* it helps avoiding the bug querying OCSP responder #2329 by adding
  openssl. The openssl supplied has a mimor DNS lookup problem due
  to glibc / musl libc compatibilty issues
* by adding openssl also it helps a bit for some performance problems
  related to other projects, see #2314

Also the git binary is removed (#2315).

Thanks to @polarathene for the discussions
 2023-03-19 22:41:17 +01:00
Dirk WetterandGitHub 30022ea697 Merge pull request #2339 from drwetter/CAstores_update_3.0 
Update CA root stores
 2023-03-19 22:27:36 +01:00
Dirk Wetter ad44f7d53e Update CA root stores 2023-03-18 22:57:52 +01:00
Dirk WetterandGitHub e9c0beb3f7 Merge pull request #2335 from drwetter/sanitize_fileout_3.0 
Backport: Make sure control chars from HTTP header don't end up in …
 2023-03-12 18:19:09 +01:00
Dirk Wetter 828af39053 Backporting Make sure control chars from HTTP header don't end up in html,csv,json 
This is for 3.0. For 3.1dev, see #2332 .

This PR addresses the bug #2330 by implementing a function which removes control characters from the file output format html,csv,json in the output.
In every instance called there's a check before whether the string contains control chars, hoping it'll save a few milli seconds.

A tr function is used, omitting LF.
It doesn't filter the terminal output and the log file output, yet. It provides a function though which is not being called.
 2023-03-12 17:40:02 +01:00
Dirk WetterandGitHub 34453664a1 Merge pull request #2334 from drwetter/drwetter-patch-5 
Update .gitignore
 2023-03-12 16:13:21 +01:00
Dirk Wetter d662b7bfec add .git dir 
see https://github.com/codespell-project/actions-codespell/issues/56
 2023-03-12 16:10:56 +01:00
Dirk Wetter 16450e3d4f add codespell corrections (aNULL) 2023-03-12 16:06:02 +01:00
Dirk WetterandGitHub d6c0b33736 Update .gitignore 
sync with 3.1dev
 2023-03-12 15:59:47 +01:00
Dirk WetterandGitHub b8bb3ef747 Merge pull request #2327 from drwetter/fix_mime-type-3.0 
Fix Accept Header (3.0)
 2023-02-20 20:29:46 +01:00
Dirk 96a4eb99ad Fix Accept Header (3.0) 
see #2325. This is for the 3.0 branch (for 3.1dev see #2326)

"whenever HTTP/1.1 is used then the Accept header uses "text/*" as a MIME type.
This causes some minor issues with some of the checks we are doing"
 2023-02-20 15:14:34 +01:00
Dirk WetterandGitHub bd310489d1 Merge pull request #2322 from dcooper16/30_no_grade 
Remove set_grade_cap() from 3.0
 2023-02-07 08:59:09 +01:00
Dirk WetterandGitHub 3bacce4770 Merge pull request #2319 from SSLbrain/3.0 
Feature request Trustcor certificate #2293 for 3.0
 2023-02-05 19:21:15 +01:00
Dirk WetterandGitHub 4a2b258425 Merge pull request #2318 from dcooper16/fix_html_30 
Fix HTML output in Bash 5.2 and newer
 2023-02-04 09:24:07 +01:00
Dirk WetterandGitHub cd2eef30ea Merge pull request #2307 from drwetter/upgrade_alpine_perf-fix-3.0 
Upgrade Alpine version for both Dockerfiles (3.0)
 2023-02-01 19:49:12 +01:00
Dirk Wetter cd66c90054 Upgrade Alpine version for both Dockerfiles (3.0) 
... to improve/mitigate performance problems, see #2299. (musl libc vs. glibc)

Same PR as for 3.1dev branch: #2306
 2023-02-01 19:47:38 +01:00
Dirk WetterandGitHub d01ded1fd0 Merge pull request #2283 from drwetter/drwetter-patch-3 
Reflect past update for Dockerfile (3.0) for ghcr
 2022-11-28 17:09:37 +01:00
Dirk WetterandGitHub 801930736f Reflect past update for Dockerfile (3.0) for ghcr 
... using alpine 3.15
 2022-11-28 14:13:56 +01:00
Dirk WetterandGitHub 6b91a60a7a Merge pull request #2274 from dcooper16/fix2249 
Fix #2249
 2022-11-11 16:30:12 +01:00
Dirk WetterandGitHub 3261e6e7a9 Merge pull request #2273 from dcooper16/fix2271_30 
Fix #2271
 2022-11-11 16:28:48 +01:00
Dirk WetterandGitHub 52fe210e76 Merge pull request #2269 from drwetter/mastodon-3.0 
Hint for mastodon
 2022-11-10 16:33:10 +01:00
Dirk WetterandGitHub 1172327509 Hint for mastodon 
... ... and to a separate account
 2022-11-10 15:14:21 +01:00
Dirk WetterandGitHub 87bae00fa5 Merge pull request #2267 from drwetter/workflow_update_3.0 
Restrict permissions, update actions
 2022-11-10 10:55:39 +01:00
Dirk WetterandGitHub 9eeb93625d Merge pull request #2263 from dcooper16/run_pfs_infinite_loop 
Fix infinite loop in run_pfs()
 2022-11-10 10:49:33 +01:00
Dirk Wetter b8afca6be1 Restrict permissions, update actions 
The actions release numbers were taken from the 3.1dev branch.

    Note: there was one strange codespell error in PR #2263.
    Maybe the updated action will avoid this in the future.
 2022-11-10 10:35:43 +01:00
Dirk WetterandGitHub abdd51d815 Merge pull request #2231 from drwetter/bump_version 
Bump version
 2022-09-28 09:19:37 +02:00
Dirk WetterandGitHub 3ad9c6edd0 Merge pull request #2243 from ghen2/grep-3.8 
Fix grep 3.8 warnings on unneeded escapes of hyphen, slash, space.
 2022-09-18 19:21:06 +02:00
Dirk WetterandGitHub 6e68763885 Merge pull request #2240 from dcooper16/neat_lis_alignment_30 
Fix alignment in neat_list()
 2022-09-16 09:15:17 +02:00
Dirk 884319948e Bump version 2022-09-07 10:49:19 +02:00
Dirk WetterandGitHub 8eb177aa45 Merge pull request #2230 from drwetter/new_binaries_3.0 
New binaries 3.0
 2022-09-07 10:39:36 +02:00
Dirk 1af2aa6106 Review text, renew some paragraphs 
.. and update links, reflect name change to -bad
 2022-09-07 10:30:08 +02:00
Dirk 5eb07e1270 Add Darwin binary from #2224 2022-09-07 10:26:02 +02:00
Dirk 8aa59d4a9a New FreeBSD x64 binary 2022-09-07 10:26:02 +02:00
Dirk 714e7049eb New Linux 32 binary 2022-09-07 10:26:02 +02:00
Dirk 35470087b5 Add newer Linux 64 bit binaries 
* supporting xmpp-server, see #1575, #1589
* address security bug, see #2179
 2022-09-07 10:25:51 +02:00
Dirk WetterandGitHub 01e6535ec1 Merge pull request #2226 from dcooper16/fix_ct_30 
Fix certificate_transparency()
 2022-09-07 10:18:59 +02:00
Dirk WetterandGitHub 14ebd0fe5d Merge pull request #2228 from dcooper16/fix_data_after_finished_30 
Fix decrypting TLS 1.3 server response
 2022-09-07 10:17:14 +02:00
Dirk WetterandGitHub bac8cb73f6 Merge pull request #2219 from dcooper16/fix2198_30 
Fix #2198
 2022-08-26 10:12:40 +02:00
Dirk WetterandGitHub bed3cbe792 Merge pull request #2216 from drwetter/alpine3.15-dockerfile_3.0 
Upgrade Alpine version to the latest stable -1
 2022-08-22 20:27:24 +02:00
Dirk 594fabe5c5 Address codespell issue in roff file 
... by regenerating it with a newer ronn version.
 2022-08-22 20:25:08 +02:00
Dirk WetterandGitHub 1154a6bc25 Upgrade Alpine version to the latest stable -1 
3.15
 2022-08-22 16:35:23 +02:00
Dirk WetterandGitHub c730d9529e Merge pull request #2202 from drwetter/certupdate_3.0 
Cert update (3.0)
 2022-07-03 16:22:18 +02:00
Dirk Wetter b148f68a85 Update README.md 2022-07-02 22:29:44 +02:00
Dirk c9dd2320ee Remove the expired DST Root CA X3 cert from ... 
Apple / Linux / Microsoft stores
 2022-07-02 22:29:04 +02:00
Dirk 721d1ab560 Reference to remove DST Root CA 2022-07-02 22:29:04 +02:00
Dirk af84d0ca4c add new stores 2022-07-02 22:29:04 +02:00
Dirk f04aa2fe03 Java.pem from Oracle jdk-17.0.3.1 2022-07-02 22:29:04 +02:00
Dirk 8a7a321e35 Apple.pem: picked from Internet (see etc/Readme.md) 2022-07-02 22:29:04 +02:00
Dirk 31e2c014bc add loop for Apple.pem 2022-07-02 22:29:04 +02:00
Dirk 0248d112ce fine tune instructions for Apple.pem 2022-07-02 22:29:04 +02:00
Dirk e6cfb364a9 Update cert store: Linux + Mozilla 2022-07-02 22:29:04 +02:00
Dirk WetterandGitHub b1c5a33cec Merge pull request #2192 from drwetter/update_clients1_3.0 
Update client simulation for 3.0
 2022-05-31 21:53:48 +02:00
Dirk Wetter 95b687b0a9 Add a few files to be ignored.. 2022-05-31 20:26:03 +02:00
Dirk Wetter 6ac9c59135 correct ch_{ciphers,sni} 
That was due to a copy error from 3.1dev.
 2022-05-31 20:08:37 +02:00
Dirk Wetter 445d20c360 Update client simulation for 3.0 
see #2169, #2168

Added:
* Safari for macOS
* Java 17 LTS
* OpenSSL 3.0.3
* Android 11 and 12
* Go client (1.17)
* Firefox 100, Chrome and Edge 101 using Win10
* Thunderbird 91.9
* AppleMail
* LibreSSL from MacOS

* disabled Java 12 and Safari on OS X 10.12
* disabled Android < 6.0

* documention update how to add a client simulation
* add curves-mapping.txt file
 2022-05-31 17:08:40 +02:00
Dirk WetterandGitHub 2ca53116ca Merge pull request #2190 from EliteTK/3.0-fix-crime-tls1.3 
Fix CRIME test on servers only supporting TLS 1.3
 2022-05-25 08:39:09 +02:00
Dirk WetterandGitHub 897443f035 Merge pull request #2185 from drwetter/censys_fix_2127.3.0 
Fix censys link (3.0)
 2022-05-14 13:50:25 +02:00
Dirk 78e67d8fff Shorten censys link 
Remove sort order and fix the argument separator
 2022-05-14 11:52:45 +02:00
Dirk d38a8b283d Backport #2184, Censys link 
See #2127. The line is very long though: 152 chars
 2022-05-14 11:42:43 +02:00
Dirk WetterandGitHub 41deaf908d Merge pull request #2170 from drwetter/fix_banner_3.0 
Fix banner and remove STARTTLS NNTP CI check
 2022-05-04 12:12:39 +02:00
Dirk Wetter a773f00fce Fix banner and remove STARTTLS NNTP CI check 
On macOS in dark mode the git tag in grey wasn't visible. It was
changed now to light grey. It also works at least on Linux
using a light terminal background.

The NNTP server which we used for STARTTLS checks seems ofen
not to work. Thus this PR removes that for the 3.0 branch.
 2022-05-04 10:56:16 +02:00
Dirk WetterandGitHub 980ec6ba33 Merge pull request #2166 from dcooper16/backport_2157_2160_2162 
Backport #2157, #2160, #2162
 2022-05-03 21:11:30 +02:00
Dirk WetterandGitHub 793eaa3f84 Merge pull request #2165 from drwetter/ftp_starttls_auth_only_3.0 
Relax STARTTLS FTP requirement (3.0)
 2022-04-28 07:30:51 +02:00
Dirk 405f431612 Relax STARTTLS FTP requirement (3.0) 
In rare? occassions where the STARTTLS FEAT request only displays AUTH instead
of AUTH TLS, testssl.sh fails as it cannot upgrade to TLS.

Required by RFC 4217 is only AUTH ("MUST"), AUTH TLS is optional ("should"), see section 6.
This PR relaxes the presence of TLS after AUTH and fixes #2132 for the 3.0 branch.
 2022-04-27 14:52:46 +02:00
Dirk WetterandGitHub 2eac75d5b5 Merge pull request #2155 from dcooper16/server_pref_no_default_protocol_30 
Fix run_server_preference() with no default protocol
 2022-04-24 18:12:19 +02:00
Dirk WetterandGitHub 0047e1f153 Merge pull request #2153 from dcooper16/no_session_id_30 
Fix setting NO_SESSION_ID
 2022-04-14 18:08:53 +02:00
Dirk WetterandGitHub 55785afb5e Merge pull request #2152 from dcooper16/fix2147_30 
Fix getting CRL
 2022-04-14 18:07:29 +02:00
Dirk WetterandGitHub a47bc2097e Merge pull request #2146 from dcooper16/ossl3_fix_30 
More OpenSSL compatibility fixes
 2022-04-12 18:51:06 +02:00
Dirk WetterandGitHub 395907a79f Merge pull request #2144 from dcooper16/ossl3_compat_30 
OpenSSL compatibility fix
 2022-04-07 21:34:30 +02:00
Dirk WetterandGitHub 4a5d93dad6 Merge pull request #2143 from dcooper16/fix2138_30 
Fix #2138 in 3.0 branch
 2022-04-07 21:27:32 +02:00
Dirk bc2c8d6eaa Remove trailing spaces to get rid of failing status of CI 2022-04-01 18:07:19 +02:00
Dirk WetterandGitHub 25ef6dc2ca Merge pull request #2136 from drwetter/drwetter-patch-1 
fix markup of roff in doc/
 2022-04-01 14:38:17 +02:00
Dirk WetterandGitHub 68a35b7610 fix markup of roff in doc/ 2022-04-01 14:37:30 +02:00
Dirk WetterandGitHub 1f846f73d8 Merge pull request #2135 from drwetter/drwetter-patch-1 
docs --> doc
 2022-04-01 14:13:20 +02:00
Dirk WetterandGitHub 084990a890 docs --> doc 
fix wrong dir for CI
 2022-04-01 14:12:56 +02:00
Dirk WetterandGitHub 2078ca52a8 Merge pull request #2134 from drwetter/2074_md_fixes.3.0 
Implement fixes in documentation from #2074 (3.0)
 2022-04-01 14:08:45 +02:00
Dirk 61c4aa2cb7 Implement fixes in documentation from #2074 (3.0) 
kudos @k0lter

  * numbering
  * some ticks / backticks
 2022-04-01 14:03:06 +02:00
Dirk WetterandGitHub 7733140e6e Merge pull request #2126 from drwetter/drwetter-patch-1 
Remove reference to fixed 3.0.x version
 2022-03-16 17:00:17 +01:00