02239be295
Detect multiple certificates cleanup
...
This corrects the indentation within determine_trust() when there are multiple certificates and the output for "Chain of trust (experim.)" takes up more than one lines.
In addition, it fixes the ID field of the JSON output for entries related to the certificate. At the moment, each ID string begins with a blank space. This changes it to remove the space if there is one certificate and to add "Server Certificate #X" at the beginning of each ID if there is more than one certificate.
Perhaps there's a better way than just using, for example, "Server Certificate #1 key_size" as a way to distinguish multiple "key_size" entries in the JSON file. This is just one idea, and it can certainly be changed if those who intend to use the JSON output prefer something else.
2016-02-09 13:35:46 -05:00
8842aeb2b9
Fix #289 - the grep that decides whether a domain is a local address doesn't consider the case when the full domain name is in the hosts file, but followed by .some.other.stuff. This PR addresses this case.
2016-02-08 12:51:54 +01:00
70cd658447
- FIX #283 (regression from 1a8ed3d70a)
...
- minor output fixes for BEAST
- >4096 bit RSA keys labled in litemangenta now as it could have compatibility probs
- -V 0x.. or -V 0X.. gives at least a warning
2016-02-07 19:13:59 +01:00
c48b27a9a9
fix typo in b93fc824
2016-02-07 03:07:30 +01:00
b93fc82489
slightly better output for OCSP stapling
2016-02-06 22:31:32 +01:00
a676742256
Remaining issues solved for OpenSSL 1.1.0 compliance, output corrections, CN/SNI improvements
2016-02-03 17:55:53 +01:00
9cf3e21c3d
- swapped sig_algo and server key size
...
- output improvements for unknown sig algos like GOST
2016-02-03 09:55:47 +01:00
ea18d2f02c
- fix: discovering the CN for the default host (without SNI)
...
- CN parsing of certificate improved
- CN / subject can be also cyrillic now -- supposed the terminal supports the charset
2016-02-03 00:05:57 +01:00
dd65050ee1
- "secret" env switch shows during -e/-E the signature algorithm (see also #276 )
...
- exp. date check corrected esp. for openssl 1.1.0
- warning relaxed for chain of trust
2016-02-01 22:06:27 +01:00
9f998d8c53
Number of trusted certificate files in $INSTALL_DIR/etc/*.pem
...
The number of .pem files in $INSTALL_DIR/etc is currently hard-coded into determine_trust. This modifies the code so that the number of files can be changed without having to change the code.
2016-02-01 14:11:50 -05:00
f7853f36a0
- added SSL_CERT_FILE=/dev/null
...
- output cleanups in determine_trust()
2016-02-01 17:33:59 +01:00
abffd1b81e
Fix chain of trust problem
...
This should fix issue #278 . I'm not sure whether openssl verify will ever print out more than one error, so to be safe, I wrote the code to handle the possibility that it might; if there is more than one error, it just takes the first and ignores the rest.
2016-02-01 11:17:13 -05:00
8f9b38f7d4
- LF and other corrections for HPKP
...
- output corrections for 2 x HPKP (e.g. scotthelme)
2016-02-01 13:23:28 +01:00
0bfe12742e
correct signature keysizes, FIX #249
2016-02-01 10:19:23 +01:00
c62abaf215
fix colored output in wide mode ( FIX #277 )
2016-01-31 23:53:13 +01:00
5ae9bb8c13
- typo in IPv4 header
...
- fixed recognition of XML,HTML to separate header
- fixed -V <pattern
2016-01-31 21:02:18 +01:00
1726d3b41c
minor change of color
2016-01-31 11:04:59 +01:00
f7baa560c2
- typos, etc
2016-01-31 10:54:45 +01:00
c564e305a7
- FIX #273
2016-01-31 01:55:23 +01:00
fc346a35fe
- indentation reverted to old value if in only one certificate
...
- minor cleanups in the output
2016-01-30 23:59:29 +01:00
2bf9c5d81e
Detect multiple certificates
...
Modifies --server-defaults to handle cases in which the server has more than one certificate (e.g., one with an RSA key and one with an ECC key).
2016-01-28 17:06:34 -05:00
495b9cda9b
- several fixes/improvements for new JSON/CSV file feature #268
...
* no color code in files
* rc4 ciphers were missing
* NODE was missing
* calling of NODEIP/PORT was not neccessary
* default naming of files similar to $LOGFILE
2016-01-23 23:33:17 +01:00
8a2fe5915a
- /usr/bin/printf --> printf
2016-01-23 20:33:46 +01:00
1a8ed3d70a
- JSON/CSV from #268 , labeled it experimental
...
- fixes partly #31
- several fixes to it (backticks, single sq brackets, renaming funcs, removed lf in JSON, ...)
2016-01-23 19:18:33 +01:00
b16ab6a021
added colorblind option
...
if colorblind option is set swap green and blue in the output
2016-01-22 20:40:08 +01:00
8bae1bc1ed
added --mapping=no-rfc
...
don't display the RFC ciphername in the cipher checks.
2016-01-19 21:55:06 +01:00
b97788ba73
typo fixed
2016-01-15 17:30:47 +01:00
5257c2f38a
- inline license clarifications
...
(separate file needed later)
2016-01-15 17:04:16 +01:00
a9643b6d1e
- hooks for rfc/non-rfc
...
- FIX for beast: no CBC cipher at all is now displayed
- minor cosmetic stuff
2016-01-15 16:37:47 +01:00
2871aaaee3
- optical cleanups for #265
...
- don't do browser tests for non-HTTP services
2016-01-15 15:53:03 +01:00
55c0b24278
Don't forget to add help message
2016-01-13 10:26:12 +01:00
ab47f8ada9
Added client simulations based on @ivanr s list on ssllabs
2016-01-13 10:21:01 +01:00
dc4f90ac48
missing linefeed
2015-12-29 17:07:03 +01:00
b962ccde53
FIX #262
2015-12-29 10:05:20 +01:00
3b17c9e321
cosmetic corrections to help
2015-12-27 14:51:18 +01:00
914e364d1e
- fix headline for non-socket support
2015-12-27 13:33:53 +01:00
e10da3a78a
- minor adjustmentents to program style
2015-12-24 23:00:23 +01:00
5c19bf5892
- fix for web sites having leading spaces b4 html/xml content starts
2015-12-22 21:08:52 +01:00
c3269f1927
- Fixes for #260
2015-12-22 20:31:52 +01:00
f65fa69c3c
Merge pull request #248 from lainegholson/master
...
Add HTTP2/ALPN support
2015-12-22 12:05:53 +01:00
826ac43504
Redirect test that doesn't depend om JSON/CSV output
2015-12-21 20:59:40 +01:00
d2df8b8590
Fix unrelated typos
2015-12-21 10:37:23 -06:00
d0122698ed
Fix ALPN when testing multiple IPs
2015-12-13 13:16:37 -06:00
d43351e2cb
Undo commit f56fdd4
2015-12-13 13:13:51 -06:00
f56fdd43da
Don't output reason not testing spdy when testing server prefs
2015-12-12 23:09:42 -06:00
1bd08f34bd
Remove redundant newlines
2015-12-12 22:58:52 -06:00
e8b04c77d3
Consider h2 a valid NPN protocol
2015-12-12 20:07:24 -06:00
3d28f44e56
Change flag order
2015-12-12 18:41:13 -06:00
33bda6408a
Add HTTP2/ALPN support
2015-12-12 18:20:57 -06:00
bac7cde3bd
- re-adjusted preference for rfc/iana mapping file
2015-12-11 13:13:22 +01:00
