Dirk Wetter
3591f70a17
reorder lines
2025-11-27 18:31:43 +01:00
Dirk Wetter
8103a0e24d
Make this work undeer MacOS
...
- URI is now example.com bc Akamai doesn't block too many checks
(MacOS runner was delayed and often hiccuped here)
- failed to flush message --prevention
- term pattern seems better than the "colorized list"
2025-11-27 18:24:15 +01:00
Dirk Wetter
7e97fef030
remove LFs and comment
2025-11-27 18:22:48 +01:00
Dirk Wetter
fc499cb67f
Akamai keeps connection open (opossum check problem)
2025-11-27 18:21:26 +01:00
Dirk Wetter
0ef742a17a
Just add comments, reorder lines
2025-11-27 17:44:31 +01:00
Dirk Wetter
4582bd8d73
Merge branch '3.3dev' into address_2952
2025-11-27 16:37:16 +01:00
Dirk Wetter
86700dbd7a
Merge pull request #2957 from testssl/flush
...
Try to remove the "failed to flush stdout" messages
2025-11-27 16:34:40 +01:00
Dirk Wetter
de6e92826a
Add stdout flush
2025-11-27 14:23:27 +01:00
Dirk Wetter
5111804b75
Try to remove the "failed to flush stdout" messages
2025-11-25 00:23:13 +01:00
Dirk Wetter
e8098fc1d2
fix remainder from old os definition
2025-11-24 12:03:03 +01:00
Dirk Wetter
dd696bb871
Merge pull request #2955 from testssl/shellcheck_path_improvement
...
No shellcheck in ./t/
2025-11-24 11:20:18 +01:00
Dirk Wetter
92e0195118
No shellcheck in ./t/
2025-11-24 11:19:13 +01:00
Dirk Wetter
d359e1108d
proper definition of os variable
2025-11-24 11:07:16 +01:00
Dirk Wetter
7ba99cd1e9
For MacOS we rather use homebrew's OpenSSL
2025-11-24 11:04:59 +01:00
Dirk Wetter
7b2804df41
remove STARTTLS
2025-11-24 10:48:41 +01:00
Dirk Wetter
4ad81cea9b
Merge pull request #2953 from testssl/dependabot/github_actions/actions/checkout-6
...
Bump actions/checkout from 5 to 6
2025-11-21 15:12:34 +01:00
Dirk Wetter
7423aa8add
Merge pull request #2951 from testssl/fixAndImprove_opossum_check_2950
...
Fix and improve Opossum check
2025-11-21 15:11:07 +01:00
dependabot[bot]
ba4855026f
Bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-21 00:02:35 +00:00
Dirk
76824b5762
Fix and improve Opossum
...
Under some circumstances the opossum vulnerability check got stuck
because the cat commdn was waiting for reading from the descriptor.
In some case like #2950 this happened when the HTTP head command
was incorrectly send in the first place.
This PR makes sure that the HTTP head is correct and it replaces
cat by read in a loop so that the HTTP response is read without
being blocked.
Also for http_head_printf() the argumensats passed were cleaned up.
2025-11-19 20:55:20 +01:00
Dirk Wetter
718c6fe4ed
Merge pull request #2947 from 24icewolf42/fix-mtls-client-pem-check
...
Add support for EC private key in mTLS check
2025-11-17 11:19:09 +01:00
Andreas Landgraf
91caad69c5
Improve regex for private key check in mTLS
2025-11-17 08:26:15 +01:00
Dirk Wetter
1394cc8d7d
Merge pull request #2949 from testssl/shellcheck_ignore_files
...
Ignore files types for shellcheck
2025-11-15 14:43:59 +01:00
Dirk Wetter
fd97a75241
Add comments for paths_ignore
2025-11-15 14:05:08 +01:00
Dirk Wetter
c07d17ea8f
Fix indentation + comment wrt paths_ignore
2025-11-15 13:56:19 +01:00
Dirk Wetter
00476b751a
Ignore files types for shellcheck
2025-11-15 13:39:09 +01:00
Dirk Wetter
12e4ebd203
Merge pull request #2948 from testssl/ratingdoc_update
...
Update docs after raiting only switch
2025-11-15 13:37:06 +01:00
Dirk Wetter
c9a886c396
Update docs after riing only swicth
...
see #2945
2025-11-15 13:31:42 +01:00
Andreas Landgraf
7c62ae5d2e
Add support for EC private key in mTLS check
2025-11-13 16:57:11 +01:00
Dirk Wetter
ae48b680fa
Merge pull request #2945 from magnuslarsen/3.3dev
...
feat: --rating-only flag to only test checks required for rating
2025-11-13 08:00:15 +01:00
Magnus Larsen
640444e1fc
feat: --rating-only flag to only test checks required for rating
2025-11-12 11:14:16 +01:00
Dirk Wetter
932c91f67c
Merge pull request #2941 from testssl/dependabot/github_actions/actions/checkout-5
...
Bump actions/checkout from 4 to 5
2025-11-11 16:46:21 +01:00
dependabot[bot]
bdf62198a8
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-11 00:10:32 +00:00
Dirk Wetter
4ba3500b0b
Merge pull request #2940 from testssl/shellcheck_cherrypicked_2428
...
Shellcheck cherrypicked from PR #2428
2025-11-10 14:37:35 +01:00
Dirk Wetter
d4cc41405f
Skipping push as it seems expensive and may cause delays
...
... no bypasses for direct commit for those changes anyway
2025-11-10 12:29:05 +01:00
Dirk Wetter
2fcd01c693
fix FP
2025-11-10 12:15:58 +01:00
Dirk Wetter
0347f2ffee
24.04 Ubuntu's instead of latest
2025-11-10 12:05:42 +01:00
meisam
191b1e791d
add shellcheck to ci
2025-11-10 12:01:06 +01:00
Dirk Wetter
f219fd6ca3
Merge pull request #2938 from testssl/fix_2937
...
Fix pattern for matching /etc/hosts entries
2025-11-03 23:39:04 +01:00
Dirk
da8a6f2f34
Fix pattern for matching /etc/hosts entries
...
`grep -w` matches also `string1-whatsoever` so that entries like
```
192.168.0.10 anystring anystring-apache
192.168.0.11 anystring-tomcat
```
matched 3 entries over 2 lines.
This PR fixes #2937 by improving the match pattern, so that
`string1` needs a trailing whitespace or a EOL -- besides a
leaing whitespace.
2025-11-03 22:30:26 +01:00
Dirk Wetter
c19d3fff0c
Merge pull request #2935 from testssl/fix_2933
...
Add new Sectigo R46 cert, update Java/Mozilla.pem
2025-11-01 18:00:27 +01:00
Dirk
3e495f456a
Add new Sectigo R46 certs + update Java/Mozilla.pem
...
Fixes #2933 .
2025-11-01 14:15:36 +01:00
Dirk Wetter
a0c99d855e
Merge pull request #2934 from testssl/shorten_badssl
...
Shorten badssl GHA as they fail too often
2025-10-30 20:41:46 +01:00
Dirk
1ce514d95f
Shorten badssl GHA as they fail too often
...
* Remove checks which aren't needed in t/51_badssl.com.t t/33_isJSON_severitylevel_valid.t
* tryying to make some files more readable
2025-10-30 18:35:43 +01:00
Dirk Wetter
0b9715c239
Merge pull request #2930 from testssl/fix_2929
...
Fix date parsing bc of locale problem
2025-10-30 15:54:23 +01:00
Dirk
da436e7d87
Fix date parsing bc of locale problem
...
The new block making sure that rust coreutils work properly (PR #2913 )
introduced a new check in order to determine which date functions
to use.
The function however parsed only for English error messages ("No such file").
This PR fixes that by setting LC_ALL to C.
Fixes #2929 .
2025-10-30 13:30:08 +01:00
Dirk Wetter
d3a96d9382
Merge pull request #2927 from testssl/fix_2926_ua_sneaky
...
Update "sneaky" user agent
2025-10-28 15:16:04 +01:00
Dirk Wetter
ce820cdaf5
Update "sneaky" user agent
...
fixes #2926 for 3.3dev.
2025-10-28 10:26:06 +01:00
Dirk Wetter
08ed5521a9
Merge pull request #2922 from testssl/shellcheck1
...
Squash some shellcheck *errors*
2025-10-13 22:10:44 +02:00
Dirk Wetter
c53e7a3955
Fix more shellcheck complaints (high severity)
...
... and fine tune some comments in the beginning
2025-10-13 21:06:02 +02:00
Dirk Wetter
8bc2185a72
Merge pull request #2923 from testssl/drwetter-patch-1
...
Minor fine tuning
2025-10-12 11:49:26 +02:00