Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,229 Commits 16 Branches 39 Tags
35a6fe94bfbba94001c9a0225aae629b0a0e5e7f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub 0ed2bf0ada Merge pull request #2234 from cancom/fix/grade-cap-sorting 
Fix grade cap reasons not showing weak public keys
 2022-10-07 16:48:06 +02:00
Dirk WetterandGitHub 09a479cb7a Merge pull request #2238 from dcooper16/SC2235 
Fix Shellcheck SC2235
 2022-10-07 16:24:04 +02:00
Dirk WetterandGitHub b03d8ca1e3 Merge pull request #2248 from war59312/patch-1 
Readme.md - Small Fixes To Docs Section
 2022-09-29 19:16:25 +02:00
Dirk WetterandGitHub c487f911aa Merge pull request #2247 from drwetter/bump_version_rc 
Bump rc version
 2022-09-28 17:17:52 +02:00
Dirk Wetter 77a2d891cf Bump rc version 
... so that distributors feel more encouraged to switch to this version
and drop 3.0.x
 2022-09-28 09:21:25 +02:00
Dirk WetterandGitHub 33376cca8c Merge pull request #2244 from drwetter/grep_quotes 
Squashed some double quotes for grep expressions
 2022-09-18 21:50:30 +02:00
Dirk Wetter 8c14a42180 Squashed some double quotes for grep expressions 
... in favor of single quotes
 2022-09-18 19:27:36 +02:00
Dirk WetterandGitHub 0e61b72197 Merge pull request #2242 from ghen2/grep-3.8 
Fix grep 3.8 warnings on unneeded escapes of hyphen, slash, space.
 2022-09-18 17:38:11 +02:00
Dirk WetterandGitHub 03b3ba8078 Merge pull request #2239 from dcooper16/neat_list_alignment 
Fix alignment in neat_list()
 2022-09-16 09:14:51 +02:00
Dirk WetterandGitHub de48956639 Merge pull request #2237 from a1346054/which 
Use bash-builtin `command -v` instead of external `which`
 2022-09-14 21:25:14 +02:00
Dirk WetterandGitHub 1193d89344 Merge pull request #2236 from a1346054/fixes 
Use `grep -E` instead of `egrep`
 2022-09-14 21:19:47 +02:00
Dirk WetterandGitHub b3c49b584d Merge pull request #2227 from dcooper16/fix_data_after_finished 
Fix decrypting TLS 1.3 server response
 2022-09-07 10:11:39 +02:00
Dirk WetterandGitHub 34f7b4d8a3 Merge pull request #2229 from cancom/feat/overall_grade 
Consistent overall_grade output
 2022-09-07 10:10:12 +02:00
Dirk WetterandGitHub 7e885b4b95 Merge pull request #2225 from dcooper16/fix_determine_cert_compression 
Fix determine_cert_compression() and certificate_transparency()
 2022-09-07 10:08:25 +02:00
Dirk WetterandGitHub 814bc8b6f5 Merge pull request #2223 from drwetter/new_binaries 
New openssl binaries
 2022-09-05 14:59:41 +02:00
Dirk d7b5abe8c1 Add Darwin binary from #2224 2022-09-05 14:57:16 +02:00
Dirk 48c7e2d25c New FreeBSD x64 binary 2022-09-01 19:26:10 +02:00
Dirk e285b48fd0 New Linux 32 binary 2022-09-01 19:20:41 +02:00
Dirk 8ab3aba818 Correct link 2022-09-01 19:06:30 +02:00
Dirk 7016c4a815 Add newer Linux 64 bit binaries 
* supporting xmpp-server, see #1575, #1589
* address security bug, see #2179
 2022-09-01 17:22:28 +02:00
Dirk f36e2afa5e Review text, renew some paragraphs 2022-09-01 17:21:00 +02:00
Dirk WetterandGitHub 5442981b63 Merge pull request #2222 from drwetter/fix_xmppserver_detection 
Fix xmpp-server detection
 2022-08-31 17:21:59 +02:00
Dirk Wetter 2071feafe3 Fix xmpp-server detection 
See #1575
 2022-08-31 09:09:05 +02:00
Dirk WetterandGitHub 0b29be2444 Merge pull request #2220 from ghen2/lmtp 
Send a proper LHLO command with argument (like EHLO), to fix -t lmtp.
 2022-08-28 20:10:01 +02:00
Dirk WetterandGitHub b577234e6d Merge pull request #2217 from drwetter/3.2rc1 
Bump version 3.1dev to first release candidate
 2022-08-22 20:27:03 +02:00
Dirk dd01effcfb Bump version to first release candidate 2022-08-22 16:49:06 +02:00
Dirk WetterandGitHub 33f28f881b Merge pull request #2215 from drwetter/alpine3.16-dockerfile 
Upgrade Alpine version to the latest stable
 2022-08-22 16:37:43 +02:00
Dirk WetterandGitHub abb8f82d85 Upgrade Alpine version to the latest stable 
3.16.
 2022-08-22 16:31:59 +02:00
Dirk WetterandGitHub 3ac6bd9335 Merge pull request #2210 from dcooper16/fix_cipher_grading 
Fix cipher grading
 2022-08-22 12:09:20 +02:00
Dirk WetterandGitHub 85a30a6ded Merge pull request #2214 from drwetter/minor_typo 
Fix typo...
 2022-08-22 11:56:59 +02:00
Dirk WetterandGitHub 349486fb39 Merge pull request #2211 from dcooper16/fix2198 
Fix #2198
 2022-08-22 11:55:33 +02:00
Dirk Wetter ad644e1cec Fix typo... 
Thanks to codespell
 2022-08-22 08:49:04 +02:00
Dirk WetterandGitHub 79a4de0513 Merge pull request #2212 from drwetter/dependabot/github_actions/docker/build-push-action-3.1.1 
Bump docker/build-push-action from 3.1.0 to 3.1.1
 2022-08-21 13:23:53 +02:00
Dirk WetterandGitHub 730c758488 Merge pull request #2206 from drwetter/update_bug_report 
Update bug_report.md
 2022-08-02 13:28:56 +02:00
Dirk WetterandGitHub 8e6aa10e22 Merge pull request #2209 from drwetter/drwetter-patch-1 
Update feature_request.md
 2022-08-02 13:28:31 +02:00
Dirk WetterandGitHub 78423d3e7d Update feature_request.md 2022-08-02 13:18:49 +02:00
Dirk WetterandGitHub 901f5712f1 Merge pull request #2207 from drwetter/fix_2203_rating 
Address grading bug when --show-each is used
 2022-08-02 13:08:45 +02:00
Dirk Wetter 4f38646523 Address grading bug when --show-each is used 
This fixes #2203. When used -E with -9 and --show-each the grading wasn't
correct as all ciphers printed were included in the grading verdict instead
of just the ones available.
 2022-08-02 10:44:41 +02:00
Dirk WetterandGitHub ffd9129f8d Update bug_report.md 
fix missing char
 2022-08-01 14:15:42 +02:00
Dirk WetterandGitHub d929c1d833 Update bug_report.md 2022-08-01 14:14:11 +02:00
Dirk WetterandGitHub 4e0309cb99 Merge pull request #2205 from drwetter/dependabot/github_actions/docker/build-push-action-3.1.0 
Bump docker/build-push-action from 3.0.0 to 3.1.0
 2022-08-01 14:00:02 +02:00
Dirk WetterandGitHub 88e80d2688 Merge pull request #2201 from drwetter/readme-patch 
Update README.md
 2022-07-02 22:13:06 +02:00
Dirk WetterandGitHub 12654b904b Update README.md 2022-07-02 22:12:56 +02:00
Dirk WetterandGitHub 559049fa60 Merge pull request #2200 from drwetter/cert_update 
Update cert stores
 2022-07-02 22:11:24 +02:00
Dirk e217af0324 Remove the expired DST Root CA X3 cert from ... 
Apple / Linux / Microsoft stores
 2022-07-02 16:02:30 +02:00
Dirk d79504ea8a Reference to remove DST Root CA 2022-07-02 16:00:16 +02:00
Dirk 9f4a3b359c add new stores 2022-07-02 15:59:00 +02:00
Dirk fb2b4935ac Java.pem from Oracle jdk-17.0.3.1 2022-07-01 22:01:36 +02:00
Dirk dca2672d88 Apple.pem: picked from Internet (see etc/Readme.md) 2022-07-01 21:55:43 +02:00
Dirk 285eb60d45 add loop for Apple.pem 2022-07-01 21:51:25 +02:00
Dirk f1003d62f8 fine tune instructions for Apple.pem 2022-07-01 21:45:02 +02:00
Dirk 8b580d1448 Update cert store: Linux + Mozilla 2022-07-01 21:32:38 +02:00
Dirk WetterandGitHub 153ce87982 Merge pull request #2194 from dcooper16/reorganize_ciphers_by_strength 
Reorganize ciphers_by_strength()
 2022-07-01 21:26:26 +02:00
Dirk WetterandGitHub 13298ffd19 Merge pull request #2193 from drwetter/moregitignore 
More .gitignore files
 2022-06-01 09:47:12 +02:00
Dirk Wetter 6959d3c9a5 few amendments to ignore files 2022-05-31 20:39:47 +02:00
Dirk WetterandGitHub 8438f99856 Merge pull request #2169 from drwetter/update_clients1 
Update client simulations
 2022-05-31 17:00:37 +02:00
Dirk Wetter c92a648391 Add LibreSSL from MacOS 2022-05-31 16:17:47 +02:00
Dirk Wetter 854028166d Including AppleMail 2022-05-31 15:12:16 +02:00
Dirk Wetter b274e3b858 correct openssl 3.0.3 data which made CI action fail 2022-05-31 14:32:47 +02:00
Dirk Wetter 6536eaddb6 remove Java 12 and OSX 10 in baseline file 2022-05-31 14:09:19 +02:00
Dirk Wetter a21a343c1c disable Java 12 and Safari on OS X 10.12 2022-05-31 12:17:38 +02:00
Dirk Wetter 09432f0346 minor fix: italic markdown 2022-05-31 12:10:36 +02:00
Dirk Wetter f90b473b32 Add Thunderbid 91.9 to hanshak simulation 2022-05-31 12:10:11 +02:00
Dirk Wetter 6023acd58c Merge branch '3.1dev' into update_clients1 2022-05-31 12:09:23 +02:00
Dirk WetterandGitHub acc063e078 Merge pull request #2181 from dcooper16/continue_server_pref_on_error 
Continue run_server_preference() on error
 2022-05-31 11:37:08 +02:00
Dirk WetterandGitHub e6f6bcaaa7 Merge pull request #2191 from drwetter/pr2189 
Fix CRIME test
 2022-05-30 14:58:48 +02:00
Dirk Wetter dfbb9f8122 Fix Actions 
this one works locally...
 2022-05-30 13:37:07 +02:00
Dirk Wetter 8d817e1dcf PR to merge #2189 
added: changes in CI so that it goes through
 2022-05-25 18:46:08 +02:00
Dirk Wetter f3fe2ac401 Merge branch 'EliteTK-fix-crime-tls1.3' into pr2189 2022-05-25 18:45:13 +02:00
Dirk WetterandGitHub d931eb470c Merge pull request #2186 from drwetter/censys_fix_2127 
Fix censys link in DROWN section
 2022-05-14 13:57:46 +02:00
Dirk 04463784a8 Fix censys link in DROWN section 
See #2127. the line seems very long though.

Note: this was previously commited as #2184 but as there were two mistakes
and one other thing which could be improved I decided to make a hard reset.

Apologize if it caused inconvenience.
 2022-05-14 12:06:09 +02:00
Dirk 1eb8347174 Update comparion/diff file for CI 
... for the time being
 2022-05-10 13:08:44 +02:00
Dirk WetterandGitHub b89574e5c7 Merge pull request #2180 from dcooper16/ossl_ffdhe 
Check for OpenSSL support for ffdhe groups
 2022-05-10 07:47:56 +02:00
Dirk Wetter 86158f0bdf Firefox 100, Chrom and Edge 101 (Win10) 
- disabled Opera (too old)
- disabled ATS 9 / iOS 9
- reenabled Android 8.1
 2022-05-09 17:49:16 +02:00
Dirk Wetter 6bd80b3baa Merge branch '3.1dev' into update_clients1 2022-05-06 10:32:01 +02:00
Dirk Wetter 22d8cd3adf Go client (1.17) 2022-05-06 10:06:03 +02:00
Dirk WetterandGitHub ff23a2ba22 Merge pull request #2177 from drwetter/dependabot/github_actions/docker/setup-buildx-action-2 
Bump docker/setup-buildx-action from 1 to 2
 2022-05-06 08:17:49 +02:00
Dirk WetterandGitHub 4935679f50 Merge pull request #2176 from drwetter/dependabot/github_actions/docker/metadata-action-4 
Bump docker/metadata-action from 3 to 4
 2022-05-06 08:17:33 +02:00
Dirk WetterandGitHub f1ce1a21bb Merge pull request #2175 from drwetter/dependabot/github_actions/docker/setup-qemu-action-2.0.0 
Bump docker/setup-qemu-action from 1.2.0 to 2.0.0
 2022-05-06 08:17:09 +02:00
Dirk WetterandGitHub acfbaf8408 Merge pull request #2174 from drwetter/dependabot/github_actions/docker/login-action-2.0.0 
Bump docker/login-action from 1.14.1 to 2.0.0
 2022-05-06 08:16:42 +02:00
Dirk WetterandGitHub c332d03323 Merge pull request #2173 from drwetter/dependabot/github_actions/docker/build-push-action-3.0.0 
Bump docker/build-push-action from 2.10.0 to 3.0.0
 2022-05-06 08:15:59 +02:00
Dirk Wetter cf79a19598 Add Android 11+12 2022-05-04 19:12:03 +02:00
Dirk Wetter 28e9ddeebd Teating of FFDHE groups 
* readded to the markdown
* readded to the clientsimulations for Java 12
 2022-05-04 18:29:29 +02:00
Dirk Wetter ac6f99fe1c correct FFDHE groups 
... so that they a recognized by ~/utils/hexstream2curves.sh
 2022-05-04 17:44:33 +02:00
Dirk Wetter c6491a3834 Correct spell checking error 
and hint to missing ALPN
 2022-05-04 15:56:25 +02:00
Dirk Wetter 415043865a Add Java 17 LTS 
plus

* amend documentation
* remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
 2022-05-04 15:46:36 +02:00
Dirk Wetter 52ed4181f9 Add SSLSocketClient in Java 
Note this doesn't add alpn (same as openssl). See here https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLSocket.html
if you want to add that.

This code is NOT GPLv2! It was taken from the Oracle web site which didn't list any license
(https://docs.oracle.com/javase/10/security/sample-code-illustrating-secure-socket-connection-client-and-server.htm).
 2022-05-04 15:39:32 +02:00
Dirk Wetter d84492a75e Update openssl 3.0.3 2022-05-04 14:32:04 +02:00
Dirk Wetter cc7a88386d Update documention how to add a client simulation 2022-05-04 12:38:12 +02:00
Dirk WetterandGitHub 859da96ad0 Merge pull request #2167 from drwetter/fix_banner 
Minor changes to banner
 2022-05-04 10:48:18 +02:00
Dirk Wetter 03803cf0c9 Add Safari for macOS 2022-05-03 22:11:31 +02:00
Dirk Wetter 34cc20b0df Minor changes to banner 
On macOS indark mode the git tag in grey wasn't visible. It was
changed now to light grey but it has to be tested how it looks
on a white terminal background.

Also CVS variables were removed which had no meaning.
 2022-05-03 21:02:56 +02:00
Dirk WetterandGitHub 0329eba688 Merge pull request #2164 from drwetter/ftp_starttls_auth_only 
Relax STARTTLS FTP requirement
 2022-04-27 14:49:02 +02:00
Dirk 6c69fdbf4b Relax STARTTLS FTP requirement 
In rare? occassions where the STARTTLS FEAT request only displays AUTH instead
of AUTH TLS, testssl.sh fails as it cannot upgrade to TLS.

Required by RFC 4217 is only AUTH ("MUST"), AUTH TLS is optional ("should"), see section 6.
This commit relaxes the presence of TLS after AUTH and it fixes #2132.
 2022-04-27 13:34:03 +02:00
Dirk WetterandGitHub ab33f6c0b6 Merge pull request #2163 from drwetter/fix-permissions-githubdockeraction 
Hotfix reenabling write permissions
 2022-04-25 10:18:49 +02:00
Dirk e5efdd6cb4 Hotfix reenabling write permissions 
see #2158
 2022-04-25 10:17:05 +02:00
Dirk WetterandGitHub db80ef14f0 Merge pull request #2156 from dcooper16/fix_run_server_defaults 
Fix run_server_defaults()
 2022-04-25 08:54:52 +02:00
Dirk WetterandGitHub 5053105d3f Merge pull request #2154 from dcooper16/server_pref_no_default_cipher 
Fix run_server_preference() with no default protocol
 2022-04-24 19:30:18 +02:00
Dirk WetterandGitHub cc8c02d653 Merge pull request #2139 from dcooper16/fix2131 
Fix #2131
 2022-04-24 18:17:17 +02:00
Dirk WetterandGitHub 4d7357a64e Merge pull request #2158 from turrisxyz/setup-permissions 
Set permissions for GitHub actions
 2022-04-24 18:03:10 +02:00