Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 21:58:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
857 Commits 16 Branches 39 Tags
35deb6a40d3b5f53edb9bef849615e0c1c8c7770
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub d4454d009b Merge pull request #383 from dcooper16/printSAN 
Printing of subjectAltName extension
 2016-06-13 19:32:31 +02:00
Dirk WetterandGitHub 88fd5c4e19 Merge pull request #381 from PeterMosmans/chachanaming 
Updated ChaCha20 cipher names
 2016-06-13 08:27:28 +02:00
Dirk WetterandGitHub 1b7653e438 Update Readme.md 2016-06-11 09:08:51 +02:00
Dirk WetterandGitHub 61a049ccf9 Merge pull request #380 from dcooper16/runallciphers128limit 
run_cipher_per_proto() 128-cipher limit
 2016-06-10 20:30:47 +02:00
Dirk adbb1932eb simplified cipher and protocol retrieval in 'Testing server preferences' 2016-06-09 15:56:53 +02:00
Dirk d561687554 initial commit 2016-06-09 15:06:42 +02:00
Dirk 6b07b89946 - added values to curve448 + 25519 2016-06-09 13:18:55 +02:00
Dirk 5ceace33e0 - FIX #189 with a smart check, introduced global var SERVER_SIZE_LIMIT_BUG 
- introduced "has_server_protocol()" which can be used to check b4 connecting if protocol is a/v
 2016-06-09 11:04:40 +02:00
Dirk 94d5a8df80 hint for new (etxernal) binaries 2016-06-09 00:06:11 +02:00
Dirk Wetter f754d67e74 Merge pull request #377 from dcooper16/curve25519 
Adding x25519 and x448 to ClientHello
 2016-06-08 17:32:28 +02:00
Dirk Wetter c929fba206 Merge pull request #342 from dcooper16/socksend_tls_clienthello_extensions 
More extensions in socksend_tls_clienthello()
 2016-06-08 10:39:17 +02:00
Dirk 022dbc687a Merge branch 'master' of github.com:drwetter/testssl.sh 2016-06-07 23:07:17 +02:00
Dirk d858edca1b - filled PROTOS_OFFERED w sense 
- minor fixes for fileout
- introduced "fixme()"
 2016-06-07 23:06:58 +02:00
Dirk Wetter 1d051a24e0 Merge pull request #374 from dcooper16/CREDITS 
Update CREDITS.md
 2016-06-07 22:40:56 +02:00
Dirk 8ed6214b6f preliminary fix for #189 (SIZELMT_W_ARND=true needed) 2016-06-07 13:02:58 +02:00
Dirk 29072315e5 output correction for IPv6 and --ip=<addr 2016-06-07 09:08:48 +02:00
Dirk 6f4ba5bda7 - corrected handling of shortened warning periods for LE certs (dual certs were wrong) 
- (kind of) readded cert_key_algo in output
- smaller output fixes e.g. for GOST certificates
 2016-06-06 13:42:17 +02:00
Dirk Wetter 4668b9879a Update Readme.md 2016-06-04 19:17:10 +02:00
Dirk Wetter efdcd805a9 Update Readme.md 2016-06-04 19:14:38 +02:00
Dirk Wetter 561cfa16fc - FIX #367 2016-06-02 21:31:24 +02:00
Dirk Wetter 6a9b0e01fc - polishing #366 and IPv6-related 2016-06-02 09:59:52 +02:00
Dirk Wetter 51f4c9ac9e Merge pull request #366 from typingArtist/365_fix_ipv6_handling 
drwetter#365 fix ipv6 handling
 2016-06-02 09:27:14 +02:00
Dirk Wetter 1074c062c7 Merge branch 'master' of github.com:drwetter/testssl.sh 2016-05-27 17:44:08 +02:00
Dirk Wetter e1a8306286 - try to address #352 
- WARNING in fileout is MEDIUM now
- NOT ok for medium on screen squashed
 2016-05-27 17:43:45 +02:00
Dirk Wetter 1ecad208fe Update Readme.md 2016-05-26 18:03:07 +02:00
Dirk Wetter 6fb15e83fa global $OPENSSL_NR_CIPHERS 2016-05-26 12:56:55 +02:00
Dirk Wetter 65193cdcee Merge pull request #361 from dcooper16/run_rc4_show_each_fix 
run_pfs() and run_rc4() show each fixes
 2016-05-24 23:47:23 +02:00
Dirk 5a03e96304 - consequently removed "NOT ok" for not-av of TLS 1.2 2016-05-23 22:42:40 +02:00
Dirk Wetter bf17a17b70 - 3DES in standard cipher list is medium, thus "NOT ok" is too much (need for elegant general way for "medium") 
(see also https://www.keylength.com/en/8/)
 2016-05-23 18:56:05 +02:00
Dirk Wetter aa99c5eb88 - FIX #347 
- LF removed in JSON
 2016-05-20 13:45:53 +02:00
Dirk Wetter 803e363310 Merge pull request #356 from dcooper16/server_key_size 
Fix typo in Server key size check
 2016-05-20 08:16:48 +02:00
Dirk Wetter fbf25d7ae1 Merge pull request #357 from dcooper16/cert_sig_algo 
Recognize more signature algorithms
 2016-05-20 08:12:52 +02:00
Dirk Wetter 9a1425da14 - FIX #354 
- polish #353
 2016-05-18 19:06:26 +02:00
Dirk Wetter 3dc94d2b3b Merge pull request #353 from dcooper16/parse_tls_serverhello_with_added_checks 
parse_tls_serverhello() with added checks
 2016-05-18 08:18:47 +02:00
Dirk Wetter 4eefe0df8b Merge pull request #314 from thomaspatzke/master 
logfile, jsonfile and csvfile parameters work without =
 2016-05-11 00:14:24 +02:00
Dirk Wetter 269a9e8c60 - fix LF in JSON/CSV output 
- fix EV detection
 2016-04-21 18:44:57 +02:00
Dirk Wetter 948118c927 Merge pull request #343 from dcooper16/fix_typos 
Fix some typos
 2016-04-21 18:21:51 +02:00
Dirk c62177044b - FIX #336 2016-04-20 18:53:04 +02:00
Dirk Wetter 199708f94c Merge pull request #335 from dcooper16/run_cipher_per_proto_speedup 
run_cipher_per_proto speedup
 2016-04-08 22:11:59 +02:00
Dirk Wetter e7c27a6dbe Merge pull request #338 from dcooper16/neat_list_bugfix 
Fix typo in neat_list()
 2016-04-08 21:57:47 +02:00
Dirk Wetter 52bd89921b Update Readme.md 2016-04-04 21:52:57 +02:00
Dirk 16927f523f - NOT OK ==> NOT ok 
- FIX #332 (--show-each w/o --wide)
- polishing PR #329
 2016-03-30 23:28:31 +02:00
Dirk 1ea6e944f3 - new chacha/poly ciphers 2016-03-29 21:56:54 +02:00
Dirk bed1a602f1 - small hint for new chacha/poly ciphers 2016-03-29 21:56:31 +02:00
Dirk 62f34cfda2 Merge branch 'master' of github.com:drwetter/testssl.sh 2016-03-29 19:47:26 +02:00
Dirk 02f6e07709 - ipv6 changes (tested with 1.0.2h) 2016-03-29 19:46:44 +02:00
Dirk Wetter c033ebd885 Merge pull request #330 from dcooper16/fix_mapping_RFC_typo 
Fix typo in mapping-rfc.txt
 2016-03-29 19:18:04 +02:00
Dirk Wetter c4d84451f1 Merge pull request #326 from dcooper16/run_allciphers_speedup 
run_allciphers() speedup
 2016-03-28 18:41:03 +02:00
Dirk c684ba7d9c - polishing 2016-03-25 11:52:23 +01:00
Dirk Wetter ad8fd1804a Merge pull request #325 from Niko78/patch-2 
Update README.md
 2016-03-25 09:22:35 +01:00
Dirk Wetter a95c807c5e Delete microsoft.pem 2016-03-25 09:07:45 +01:00
Dirk Wetter 7bb8ecc566 - now the stores are properly named 2016-03-24 18:56:26 +01:00
Dirk Wetter 53b0843664 - added Apple certificate store 
- renamed the other stores accordingly (caps in the beginng)
 2016-03-24 18:52:10 +01:00
Dirk dd30b8225e - FIX #324 (thx, @dawsonpaul 2016-03-21 23:03:42 +01:00
Dirk Wetter b5b158d5b2 - BREACH missed a LF 2016-03-19 18:15:38 +01:00
Dirk ab7f66533c - FIX #323 
- add  MicrosoftSharePointTeamServices in header detection
 2016-03-19 17:20:36 +01:00
Dirk Wetter a0b7d04974 Update README.md 2016-03-14 22:40:29 +01:00
Dirk Wetter 50660e9edd typos, minor additions 2016-03-13 21:13:03 +01:00
Dirk Wetter 682ea066d6 typos, clarification 2016-03-13 21:10:00 +01:00
Dirk Wetter 7f28b17b3c - updated, see #317 2016-03-13 20:38:06 +01:00
Dirk Wetter 46407ad2e4 - updated Mozilla truststore from http://curl.haxx.se/ instead of local firefox install, #317 2016-03-12 18:19:15 +01:00
Dirk Wetter 942359c8c1 - FIX #318 
- minor code housekeeping
- increased amount of buffer read for sockets, real fix follows. #313
 2016-03-12 17:08:43 +01:00
Dirk Wetter cf7fb4f773 Update Readme.md 2016-03-11 16:42:20 +01:00
Dirk Wetter 9753f0dbb7 Update Readme.md 2016-03-11 16:41:46 +01:00
Dirk Wetter a72133419a web frontend 2016-03-08 18:12:34 +01:00
Dirk 3ab9ec0230 Merge branch 'master' of github.com:drwetter/testssl.sh 2016-03-08 10:39:13 +01:00
Dirk 7b0fabdbc4 - making the read buffer for server hello bigger+variable 2016-03-08 10:38:21 +01:00
Dirk Wetter 0cae7a9a7d Merge pull request #311 from noqqe/master 
Format readme for better readability
 2016-03-07 20:20:24 +01:00
Dirk 483139f0a4 - show censy link by default 2016-03-05 21:35:30 +01:00
Dirk Wetter 28a6199109 - several code housekeepings 
* SHOW_EACH_C has now the correct logic
  * pr_litemagenta ==> pr_warning
  * fileout WARN according to pr_warning then changed appropiately
  * some global vars in "" to avoid unneccessary shell expansion
  * HAS_SSL2/HAS_SSL3 now works more reliably
  * warning added in cipher order if ssl2/ssl3 is not supported by openssl
 2016-03-05 21:07:49 +01:00
Dirk Wetter 118f897d6d Merge pull request #308 from skunkwerks/master 
fix certificate_info() test
 2016-03-04 00:33:25 +01:00
Dirk Wetter 1ead2e65bc - experimental label for DROWN 2016-03-03 20:04:20 +01:00
Dirk Wetter 6367693ccf - first check for DROWN #305 2016-03-03 19:50:44 +01:00
Dirk Wetter 752e6cdf56 - one outstanding openssl CVE issue wrt SSLv2 
- first skeleton for DROWN #305
 2016-03-03 11:56:25 +01:00
Dirk Wetter c4a68df423 Merge pull request #306 from thecky/severity 
Rename pr_() from color to severity naming
 2016-03-02 16:49:46 +01:00
Dirk Wetter 61ecf051e4 Merge pull request #300 from Dude4Linux/uppercase-severity-codes 
Consistent case severity codes
 2016-02-24 08:35:24 +01:00
Dirk Wetter 53e76b0545 Update Readme.md 2016-02-23 09:08:11 +01:00
Dirk 20cee1e788 - fix: relative redirect led to fp (https) 2016-02-22 10:44:43 +01:00
Dirk c70a13d014 - fix #296 (no recent regression as assumed) 2016-02-20 21:46:17 +01:00
Dirk 583584e095 - FIX #297 
- FIX #243
- reformmated BEAST a bit (was screwed up in ! WIDE mode if too many ciphers
 2016-02-20 14:10:04 +01:00
Dirk 71b4c03202 - fix key problem hpkp 2016-02-20 11:07:47 +01:00
Dirk Wetter 7846fc5fef Merge pull request #294 from b1gb1t/jsonCorrection 
Correction of line 3607: new line (\n) corrupted the json format
 2016-02-16 12:32:05 +01:00
Dirk Wetter 61c1669687 Merge pull request #292 from dcooper16/multiple_certificates 
Detect multiple certificates cleanup
 2016-02-14 00:08:52 +01:00
Dirk Wetter 79445ebe5b Merge pull request #293 from SietsevanderMolen/fix-json 
fix json output
 2016-02-12 15:11:45 +01:00
Dirk Wetter 70cd658447 - FIX #283 (regression from 1a8ed3d70a) 
- minor output fixes for BEAST
- >4096 bit RSA keys labled in litemangenta now as it could have compatibility probs
- -V 0x.. or -V 0X.. gives at least a warning
 2016-02-07 19:13:59 +01:00
Dirk Wetter b8f2540541 Merge pull request #286 from tjconcept/master 
fix typo in b93fc824
 2016-02-07 08:49:20 +01:00
Dirk b93fc82489 slightly better output for OCSP stapling 2016-02-06 22:31:32 +01:00
Dirk Wetter c60a39282c typo 2016-02-06 16:18:46 +01:00
Dirk Wetter 0f4eb221fb additions, naming of sources 2016-02-06 16:17:01 +01:00
Dirk Wetter 1fe9c95dc0 checkin (for future work) 2016-02-06 15:42:55 +01:00
Dirk Wetter 5491333693 Merge pull request #285 from dcooper16/mapping-rfc 
Fix typo in etc/mapping-rfc.txt
 2016-02-06 10:30:54 +01:00
Dirk 39226e05d2 openssl 1.1.0 2016-02-03 17:56:56 +01:00
Dirk a676742256 Remaining issues solved for OpenSSL 1.1.0 compliance, output corrections, CN/SNI improvements 2016-02-03 17:55:53 +01:00
Dirk 9cf3e21c3d - swapped sig_algo and server key size 
- output improvements for unknown sig algos like GOST
 2016-02-03 09:55:47 +01:00
Dirk ea18d2f02c - fix: discovering the CN for the default host (without SNI) 
- CN parsing of certificate improved
- CN / subject can be also cyrillic now -- supposed the terminal supports the charset
 2016-02-03 00:05:57 +01:00
Dirk Wetter 40d4cbb57f Update Readme.md 2016-02-01 22:42:49 +01:00
Dirk Wetter aff08b1ff2 Update CREDITS.md 2016-02-01 22:41:36 +01:00
Dirk dd65050ee1 - "secret" env switch shows during -e/-E the signature algorithm (see also #276) 
- exp. date check corrected esp. for openssl 1.1.0
- warning relaxed for chain of trust
 2016-02-01 22:06:27 +01:00
Dirk Wetter ff714a673f Merge pull request #280 from dcooper16/number_of_cert_bundles 
Number of trusted certificate files in $INSTALL_DIR/etc/*.pem
 2016-02-01 21:02:14 +01:00
Dirk Wetter f7853f36a0 - added SSL_CERT_FILE=/dev/null 
- output cleanups in determine_trust()
 2016-02-01 17:33:59 +01:00