549d432dc7
Merge branch 'master' into openss2rfc_rfc2openssl
2016-06-23 09:38:04 -04:00
df2904edbf
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-06-23 09:36:58 -04:00
df4edd4152
Merge branch 'master' into version_negotiation
2016-06-23 09:36:06 -04:00
bebdc3c70e
Merge branch 'master' into client_sim_sockets
2016-06-23 09:24:54 -04:00
68353db42b
polishing #382
2016-06-23 14:33:26 +02:00
31c8979d41
Merge pull request #382 from seccubus/mass_and_file_out
...
Allow the file output feature and mass_test feature to work together
2016-06-23 13:40:09 +02:00
b5b9dd8712
Merge pull request #387 from bad/master
...
porting to NetBSD
2016-06-23 12:15:02 +02:00
ef23703903
fix for #389
2016-06-23 12:04:45 +02:00
18c5f273c3
HSTS: check if max-age is present and nonzero
2016-06-21 21:24:24 +02:00
f8579ee2f7
Fix HSTS/HPKP includeSubDomains and preload being broken in file output.
2016-06-21 08:57:39 +02:00
0fd261eb6c
Refactor date parsing. Makes testssl.sh work on NetBSD too.
...
Introduce a parse_date() function to handle all date parsing.
Check for the following date(1) variants:
GNU: accepts "-d date-to-parse".
FreeBSD/OS X: accepts "-j -f input-format"
everything else: accepts "-j date-to-parse"
usage: parse-date date output-format input-format
Tested on NetBSD, OS X 10.11 and Debian jessie.
2016-06-20 22:01:13 +02:00
48d5e5a7a1
Drop remaining '\c's in printf(1) arguments.
2016-06-20 22:01:13 +02:00
b8b779b419
Use sockets for client simulations
...
Modify run_client_simulation() to send the ClientHello from https://api.dev.ssllabs.com/api/v3/getClients (modified to use the correct value in the server name extension) if $EXPERIMENTAL is true, $STARTTLS is empty, and $SSL_NATIVE is false.
2016-06-17 16:33:00 -04:00
1275ce5ed2
Merge branch 'master' into version_negotiation
2016-06-17 16:18:09 -04:00
0a51239cda
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-06-17 16:17:31 -04:00
5a5424653b
Merge branch 'master' into openss2rfc_rfc2openssl
...
Conflicts:
testssl.sh
2016-06-17 16:16:38 -04:00
aeef882476
Merge branch 'master' into more_sslv2_sslv3_fixes
2016-06-17 16:14:59 -04:00
2b4d10137a
Merge branch 'master' into fix_issue_276
2016-06-17 16:14:24 -04:00
02e9f5cd23
fix colum spacing again for all alg chacha poly ciphers
2016-06-15 21:31:10 +02:00
d10dd6d34c
align old chacha/poly ciphers output in OPENSSL name, see #379
2016-06-15 20:12:48 +02:00
3b1d8b6253
Need to deal with the comma correctly if we are appending to a file
2016-06-14 10:36:57 +02:00
4114db6663
Another update to ChaCha20 cipher names
2016-06-13 16:11:23 -04:00
8053e42e0f
Update ChaCha20 cipher names
...
In accordance with PR #381 , updated the ChaCha20 cipher names, then realigned the columns since the new cipher names are longer than any previously encountered cipher name.
2016-06-13 15:23:23 -04:00
b590ecedcf
Merge branch 'master' into version_negotiation
2016-06-13 15:03:11 -04:00
321a8bfe57
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-06-13 15:02:20 -04:00
35deb6a40d
Merge branch 'master' into more_sslv2_sslv3_fixes
2016-06-13 15:00:52 -04:00
42674ef2b8
Merge branch 'master' into openss2rfc_rfc2openssl
2016-06-13 15:00:09 -04:00
5f120f8021
Merge branch 'fix_issue_276' of https://github.com/dcooper16/testssl.sh into fix_issue_276
2016-06-13 14:57:51 -04:00
3420c86e7f
Merge branch 'master' into fix_issue_276
2016-06-13 14:55:55 -04:00
1d0c8cb3f8
Printing of subjectAltName extension
...
Modify the extraction of the subjectAltName extension from certificates in order to address SANs with name forms other than DNS and otherName.
2016-06-13 12:52:19 -04:00
b264714fd9
Add check of IP address
...
compare_server_name_to_cert() now checks the DNS names and IP addresses in the subjectAltName extension for a match.
2016-06-13 11:09:15 -04:00
701545dbb6
Allow the file output feature and mass_test feature to work together
2016-06-13 15:35:56 +02:00
b7fe461a6c
Merge branch 'master' into openss2rfc_rfc2openssl
2016-06-10 15:34:00 -04:00
706db7553f
Merge branch 'master' into more_sslv2_sslv3_fixes
2016-06-10 15:30:56 -04:00
76ea57863a
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-06-10 15:29:00 -04:00
f84ebd99b5
Merge branch 'master' into fix_issue_276
2016-06-10 15:27:46 -04:00
52d6eabdf7
Merge branch 'master' into version_negotiation
...
Conflicts:
testssl.sh
2016-06-10 15:26:29 -04:00
8c86049848
run_cipher_per_proto() 128-cipher limit
...
Ensure that neither run_allciphers() nor run_cipher_per_proto() sends a ClientHello with 128 or more cipher suites.
2016-06-10 13:45:25 -04:00
b566da94f5
Revised to use arrays
...
Here is a revision that creates a mapping file (similar to mapping.txt, but that mirrors the formatting of "$OPENSSL ciphers -V" and that includes all cipher suites, even ones for which there is no OpenSSL name), loads the contents of the file into arrays, and then uses the arrays to implement openssl2rfc() and rfc2openssl().
2016-06-10 11:11:39 -04:00
b8348c6454
Merge branch 'master' into version_negotiation
2016-06-09 10:21:49 -04:00
bf4134844c
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-06-09 10:21:09 -04:00
c20d2dfc6f
Merge branch 'master' into more_sslv2_sslv3_fixes
2016-06-09 10:20:20 -04:00
c1624782d5
Merge branch 'master' into openss2rfc_rfc2openssl
2016-06-09 10:18:29 -04:00
189fe662f5
Merge branch 'master' into fix_issue_276
2016-06-09 10:17:49 -04:00
adbb1932eb
simplified cipher and protocol retrieval in 'Testing server preferences'
2016-06-09 15:56:53 +02:00
c656015312
Merge branch 'master' into version_negotiation
...
Conflicts:
testssl.sh
2016-06-09 09:34:37 -04:00
d2bded1114
Merge branch 'master' into run_allciphers(),run_cipher_per_proto(),-and-SSLv2
2016-06-09 09:33:05 -04:00
aa9eeaf6af
Merge branch 'master' into more_sslv2_sslv3_fixes
...
Conflicts:
testssl.sh
2016-06-09 09:31:46 -04:00
a46b6791db
Merge branch 'master' into fix_issue_276
2016-06-09 09:29:40 -04:00
5ceace33e0
- FIX #189 with a smart check, introduced global var SERVER_SIZE_LIMIT_BUG
...
- introduced "has_server_protocol()" which can be used to check b4 connecting if protocol is a/v
2016-06-09 11:04:40 +02:00
