Frank Breedijk
dd10194977
Addressed comments by @drwetter
...
It is OK for a site to pin a CA that is not part of the chain (like github.com does)
This is a provision against a CA compromise (like diginotar) which could lead to a
briked site in case of CA compromise.
GitHub has built in multiple levels of security they have both backup pins for host
certs and back pins for CAs (and I wouldn;t be surprised if they have a backup
intermediate pin too).
2016-07-25 11:02:05 +02:00
Frank Breedijk
9133eddb9a
Working unit tests again
2016-07-25 10:57:10 +02:00
Frank Breedijk
5d7367a68d
Shell script to generate ca_hashes.txt (OSX only)
2016-07-25 09:47:24 +02:00
Frank Breedijk
fccc5fe4fb
Merge branch 'CA_pinning' of https://github.com/drwetter/testssl.sh into CA_pinning
2016-07-25 09:38:30 +02:00
Frank Breedijk
02fb4ef9ca
Debug begone
2016-07-06 00:12:48 +02:00
Frank Breedijk
845e6c13a3
And we have unit tests too (and found some bugs in the process)
2016-07-05 23:55:19 +02:00
Frank Breedijk
95e42b2fdf
Better displaying of findings
2016-07-05 23:33:20 +02:00
Frank Breedijk
5ea49c1433
Merge branch 'master' of https://github.com/drwetter/testssl.sh into feature/ca-pinning
2016-07-05 18:15:46 +02:00
Frank Breedijk
07f91a54bf
Fixed the encoding for root/intermediate CAs now.
2016-07-05 18:10:36 +02:00
Frank Breedijk
e280cac2af
Without bash-bsd check
2016-07-04 17:30:32 +02:00
Frank Breedijk
4efb6531c2
Merge branch 'master' of https://github.com/drwetter/testssl.sh into issues/258
2016-07-04 17:28:06 +02:00
Frank Breedijk
3049425740
Checks for CA and intermediate pins too. Need to clean up output and write unit tests
2016-07-04 17:25:48 +02:00
Frank Breedijk
a648470988
Not done yet, but the basic code is working
2016-07-04 17:21:24 +02:00
Frank Breedijk
946506f3ac
This Fixes #258 - Checks if /dev/fd is mounted on FreeBSD
2016-07-03 19:52:48 +02:00
Frank Breedijk
ec9276c17d
Serach and replace failure, fixed now
2016-06-29 00:38:51 +02:00
Frank Breedijk
23ef87c134
Making tests work correctly
2016-06-29 00:35:52 +02:00
Frank Breedijk
ac7dd4da79
CBC isn't done yet. Unit tests count themselves now
2016-06-29 00:24:57 +02:00
Frank Breedijk
0e8f69e6ac
Merge branch 'master' into unit-tests
2016-06-29 00:16:36 +02:00
Frank Breedijk
fa19ac168f
Be more verbose in your error testing
2016-06-29 00:15:32 +02:00
Frank Breedijk
353756ffd6
We need dnsutils as well
2016-06-29 00:12:46 +02:00
Frank Breedijk
2111008880
Install test dependancies
2016-06-29 00:09:12 +02:00
Frank Breedijk
0a86f07e61
Lets get unit testing
2016-06-29 00:02:53 +02:00
Frank Breedijk
6801279471
Additional tests
2016-06-28 23:59:36 +02:00
Frank Breedijk
a25a66ff49
Lets add some unit tests to testssl.sh - Using abdsll.com work
2016-06-27 16:49:54 +02:00
Frank Breedijk
3b1d8b6253
Need to deal with the comma correctly if we are appending to a file
2016-06-14 10:36:57 +02:00
Frank Breedijk
701545dbb6
Allow the file output feature and mass_test feature to work together
2016-06-13 15:35:56 +02:00
Frank Breedijk
55c0b24278
Don't forget to add help message
2016-01-13 10:26:12 +01:00
Frank Breedijk
ab47f8ada9
Added client simulations based on @ivanr s list on ssllabs
2016-01-13 10:21:01 +01:00
Frank Breedijk
826ac43504
Redirect test that doesn't depend om JSON/CSV output
2015-12-21 20:59:40 +01:00
Frank Breedijk