1
0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-07-18 11:41:56 +02:00
Commit Graph

3944 Commits

Author SHA1 Message Date
ebcd3105c8 Add GitHub Actions testing 2021-06-06 21:06:58 +02:00
7da45a81f8 Merge pull request from drwetter/tz_fix+
Display time as suggested in utc (3.1dev)
2021-06-03 20:19:29 +02:00
e1be4eabd2 Display time as suggested in utc (3.1dev)
See 
2021-06-03 19:24:50 +02:00
0da8ce02cd Merge pull request from PeterDaveHello/AddBasicEditorConfig
Add a basic .editorconfig into project
2021-06-01 14:26:47 +02:00
83909dec0c Merge pull request from PeterDaveHello/MakeVimModelineConsistent
Add missing vim modeline config in sh & perl files
2021-06-01 11:20:33 +02:00
f447ca466b Add a basic .editorconfig into project, close 2021-06-01 14:51:06 +08:00
cbae32e5a4 Add missing vim modeline config in sh & perl files, cc 2021-06-01 14:40:24 +08:00
737ea1e7e5 Merge pull request from PeterDaveHello/MakeVimModelineConsistent
Make vim modeline config consistent
2021-06-01 08:34:23 +02:00
9e61b8ba13 Make vim modeline config consistent, cc 2021-06-01 14:31:31 +08:00
1d306db062 Merge pull request from PeterDaveHello/ShebangConsistency
Make Shell Scripts' Shebang more consistent and portable
2021-05-31 10:17:47 +02:00
893bb98a61 Merge pull request from PeterDaveHello/FixIndentation
Fix indentation in testssl.sh
2021-05-31 10:16:45 +02:00
50ee914ee4 Make Shell Scripts' Shebang more consistent and portable 2021-05-31 15:27:37 +08:00
4d62f08308 Merge pull request from PeterDaveHello/IsGitHub
Correct "GitHub" case as it should be
2021-05-29 21:24:58 +02:00
8d42528ec6 Correct "GitHub" case as it should be 2021-05-30 01:19:58 +08:00
413f7ce9a4 Fix indentation in testssl.sh 2021-05-30 01:12:15 +08:00
d41ea6c814 Merge pull request from PeterDaveHello/FixCompressionDetection
Fix compression detection variable syntax in run_breach()
2021-05-28 22:29:11 +02:00
1b4b9e3262 Fix compression detection variable syntax in run_breach() 2021-05-28 23:43:43 +08:00
1387b4ccb4 Merge pull request from drwetter/drwetter-patch-1
Update feature_request.md
2021-05-16 15:24:23 +02:00
3fea4e01e1 Update feature_request.md 2021-05-16 15:24:06 +02:00
46ad8801de Merge pull request from drwetter/drwetter-patch-1
Update bug_report.md
2021-05-16 15:07:19 +02:00
188003ea97 Update bug_report.md 2021-05-16 15:07:08 +02:00
15ace79a4c Merge pull request from vitaliytv/patch-1
upd alpine to 3.12
2021-05-15 12:27:41 +02:00
325e7380b9 Merge pull request from dcooper16/send_to_stderr
Print errors to stderr
2021-05-15 12:22:34 +02:00
e4807a7c9a Merge pull request from dcooper16/specify_err_code
Specify an error code in all calls to fatal()
2021-05-13 18:46:05 +02:00
265c85a44f Specify an error code in all calls to fatal()
This commit fix a few places in which calls to fatal() do not specify an error code.
2021-05-13 11:32:56 -04:00
0552fdadb8 Print errors to stderr
In parse_cmd_line() error messages are usually printed to stderr, but in three places the messages are printed to stdout. This commit modifies those three lines so that they also print to stderr.

The commit also replaces a call to a non-existant function, tmln_magenta_term, with a call to tmln_magenta.
2021-05-13 11:10:01 -04:00
17ad3d70a4 Merge pull request from drwetter/epoch_180hsts_1879
Fix "off by one" error in HSTS
2021-05-10 12:12:39 +02:00
a6f8aa61de Fix travis
Respect changed HSTS epoch time of 180 days.

(DROWN output is changed too as the certificated changed but doesn't matter
as the travis check filters that)
2021-05-10 11:28:25 +02:00
2c3589742b Merge pull request from definity/3.1dev
fixed minor bug with json output for TLS1.1
2021-05-09 10:56:56 +02:00
6b9d8bbc51 fixed minor bug with json output for TLS1.1 2021-05-08 19:24:56 +00:00
9121c7a3c9 Fix "off by one" error in HSTS
There was by mistake a 179 days threshold and also the error message
was wrong when HSTS was exactly set to 179 days.

This commit sets it to 180 days and corrects the error messages on
both screen and JSON.
2021-05-08 14:45:38 +02:00
37a6b905a5 Merge pull request from dcooper16/improve_ossl30_support
Improve compatibility with OpenSSL 3.0
2021-04-08 15:00:28 +02:00
944eb1bcd9 Improve compatibility with OpenSSL 3.0
This commit addresses a few issued related to the use of testssl.sh with OpenSSL 3.0.0-alpha14.

First, when pkey is used to print a DH key that uses an unknown group, OpenSSL 3.0.0-alpha14 labels the prime and generator using "P:" and "G:" rather than "prime:" and "generator:". (In PR  it was noted that OpenSSL 3.0.0-alpha1 used "prime P:" and "generator G:". The x509 command in OpenSSL 3.0.0-alpha14 still uses "prime P:" and "generator G:" when printing a DH public key in a certificate, but the pkey command just uses "P:" and "G:").

Second, when the pkey command is used to print a DH key that uses certain common primes (e.g., groups from RFC 3526 or RFC 7919), OpenSSL 3.0.0-alpha14 simply prints "GROUP: " followed by a short name for the group rather than printing the value of the prime and generator.

Finally, the "-text" option no longer works if the input is a public key. Fortunately, the "-text_pub" option provides the expected results with all versions of OpenSSL and LibreSSL.
2021-04-07 13:28:34 -04:00
ac39aa5832 Merge pull request from drwetter/fix1860_svSE_etc_charset
Ensure certain regex patterns work as expected and aren't localized
2021-04-04 17:46:50 +02:00
30bafe6d4f Ensure certain regex patterns work as expected and aren't localized
see  .

This PR is trying to address an issue where probably newer bash versions
is treated differently as in other locales, W is just a variant of V
see also e.g.

https://collation-charts.org/opensolaris/opensolaris.2008.05.sv_SE.UTF-8.html
https://www.sqlservercentral.com/forums/topic/order-by-name-not-works#post-1644177
2021-04-04 11:55:29 +02:00
1569bded44 Merge pull request from drwetter/rhs_quotes_fix
Fix redundant quotes at RHS of ==
2021-04-02 18:13:57 +02:00
2101425c59 Fix redundant quotes at RHS of ==
While looking at  there were two instances where
the right hand side of expressions in a double square
bracket had quotes.
2021-04-02 17:01:36 +02:00
269f92dea1 Merge pull request from drwetter/fix_unittest_61_diff
Adjust master template for t/61_diff_testsslsh.t
2021-04-02 16:59:47 +02:00
e71ebfea4a Adjust master template for t/61_diff_testsslsh.t
... so that Travis CI works again
2021-04-02 16:57:20 +02:00
88f9e07ac6 Merge pull request from vin01/3.1dev
Add xxd to docker image
2021-04-01 09:39:55 +02:00
5e062087f9 Add xxd to docker image
xxd is not a strict requirement and a fallback logic exists to handle its absence. However it is in general more performant and helpful in debugging as well which is desirable in many situations like ci/cd pipelines. See commit 3756cdc for details
2021-04-01 09:07:44 +02:00
f3e00738f3 Merge pull request from vin01/3.1dev
Use locally scoped counter in hex2binary
2021-03-31 15:43:19 +02:00
09ce15ebe9 Use locally scoped counter in hex2binary 2021-03-31 14:09:38 +02:00
b468071d72 Merge pull request from jschauma/3.1dev
whitespace alignment
2021-03-25 22:13:31 +01:00
e282dbcd1a whitespace alignment 2021-03-25 16:39:36 -04:00
d07b6bcd2b Merge pull request from jschauma/3.1dev
add codepoints for RFC7905, ChaCha20-Poly1305
2021-03-25 20:58:41 +01:00
8f13f4d45c add codepoints for RFC7905, ChaCha20-Poly1305 2021-03-25 11:27:25 -04:00
2a6eb51e1d Merge pull request from dcooper16/cleanup_hex2binary
Cleanup conversion from ASCII-HEX to binary
2021-03-24 13:51:45 +01:00
d8bec390be Reintroduce hex2ascii()
Add hex2ascii() as a function that just calls hex2binary().
2021-03-22 11:56:46 -04:00
3756cdcb38 Cleanup conversion from ASCII-HEX to binary
This commit makes some minor improvements to code that converts ASCII-HEX to binary.

First, testssl.sh currently has two functions that do the same thing: asciihex_to_binary() and hex2ascii(). This commit all calls to either of these functions with calls to hex2binary(), which is based on the current asciihex_to_binary().

This commit also changes direct use of printf to calls to hex2ascii() in generate-ccm-counter-blocks(), ccm-compute-tag(), and generate_gcm_counter().

Finally, this commit cleans up the implemention of hex2binary() a bit and introduces the option to use xxd, if that program is available. Using xxd rather than multiple calls to printf has a couple of advantages. xxd is a bit faster. However, the primary advantage is that when debugging (i.e., using bash -x), each call to hex2binary() only includes a few steps, regardless of how long the string is, whereas using printf the call to hex2binary() could take hundreds of steps.
2021-03-22 11:55:30 -04:00