Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 21:58:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
696 Commits 16 Branches 39 Tags
386234f7945ad3f5d01e3a6df8c7fb330ad9d414
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk Wetter 386234f794 Merge pull request #279 from dcooper16/chain_of_trust_fix 
Fix chain of trust problem
 2016-02-01 17:23:03 +01:00
Dirk Wetter 2f4e549dab - missing root certs 2016-02-01 16:27:20 +01:00
Dirk Wetter 8f9b38f7d4 - LF and other corrections for HPKP 
- output corrections for 2 x HPKP (e.g. scotthelme)
 2016-02-01 13:23:28 +01:00
Dirk 0bfe12742e correct signature keysizes, FIX #249 2016-02-01 10:19:23 +01:00
Dirk c62abaf215 fix colored output in wide mode (FIX #277) 2016-01-31 23:53:13 +01:00
Dirk 5ae9bb8c13 - typo in IPv4 header 
- fixed recognition of XML,HTML to separate header
- fixed -V <pattern
 2016-01-31 21:02:18 +01:00
Dirk 1726d3b41c minor change of color 2016-01-31 11:04:59 +01:00
Dirk 5e051c351a credit the cleanups of dcooper16 also 2016-01-31 10:55:45 +01:00
Dirk 49bc6592b8 multiple certs 2016-01-31 10:55:21 +01:00
Dirk f7baa560c2 - typos, etc 2016-01-31 10:54:45 +01:00
Dirk c564e305a7 - FIX #273 2016-01-31 01:55:23 +01:00
Dirk fc346a35fe - indentation reverted to old value if in only one certificate 
- minor cleanups in the output
 2016-01-30 23:59:29 +01:00
Dirk 5178e0db37 dcooper16 for the multiple certs thing 2016-01-30 23:57:00 +01:00
Dirk Wetter 8437bce546 Merge pull request #275 from dcooper16/multiplecerts 
Detect multiple server certificates
 2016-01-30 23:49:10 +01:00
Dirk 495b9cda9b - several fixes/improvements for new JSON/CSV file feature #268 
* no color code in files
  * rc4 ciphers were missing
  * NODE was missing
  * calling of NODEIP/PORT was not neccessary
  * default naming of files similar to $LOGFILE
 2016-01-23 23:33:17 +01:00
Dirk Wetter 447b6f6012 Update Readme.md 2016-01-23 21:28:37 +01:00
Dirk 8a2fe5915a - /usr/bin/printf --> printf 2016-01-23 20:33:46 +01:00
Dirk a8d08bbf92 update 2016-01-23 19:25:45 +01:00
Dirk 1a8ed3d70a - JSON/CSV from #268, labeled it experimental 
- fixes partly #31
- several fixes to it (backticks, single sq brackets, renaming funcs, removed lf in JSON, ...)
 2016-01-23 19:18:33 +01:00
Dirk 51e197c549 Merge branch 'master' of github.com:drwetter/testssl.sh 2016-01-23 13:34:04 +01:00
Dirk Wetter 477f6eb053 Merge pull request #270 from thecky/master 
added colorblind option
 2016-01-23 09:35:52 +01:00
Dirk 9880bd6a49 - added 0xc072-0xc079, 0xc033-0xc03B 2016-01-20 15:04:12 +01:00
Dirk a1ef935903 20 CCM cipher added 2016-01-20 14:17:38 +01:00
Dirk Wetter 3579cf2953 Merge pull request #267 from thecky/master 
added --mapping=no-rfc
 2016-01-20 12:32:19 +01:00
Dirk b97788ba73 typo fixed 2016-01-15 17:30:47 +01:00
Dirk 0d767dad8f - mentioning where the client data comes from 2016-01-15 17:05:43 +01:00
Dirk 5257c2f38a - inline license clarifications 
(separate file needed later)
 2016-01-15 17:04:16 +01:00
Dirk a9643b6d1e - hooks for rfc/non-rfc 
- FIX for beast: no CBC cipher at all is  now displayed
- minor cosmetic stuff
 2016-01-15 16:37:47 +01:00
Dirk edd689b53e client check 2016-01-15 16:27:18 +01:00
Dirk 2871aaaee3 - optical cleanups for #265 
- don't do browser tests for non-HTTP services
 2016-01-15 15:53:03 +01:00
Dirk e68fcc9dad - remove duplicates 2016-01-15 15:15:29 +01:00
Dirk Wetter 8b22e1be19 Merge pull request #265 from seccubus/feature/client-sims 
Feature/client sims
 2016-01-15 14:07:13 +01:00
Dirk 5ff214b894 updates, failed e.g. at github.com 2016-01-13 19:34:11 +01:00
Dirk dc4f90ac48 missing linefeed 2015-12-29 17:07:03 +01:00
Dirk b962ccde53 FIX #262 2015-12-29 10:05:20 +01:00
Dirk 3b17c9e321 cosmetic corrections to help 2015-12-27 14:51:18 +01:00
Dirk 08947b3267 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-12-27 13:34:26 +01:00
Dirk 914e364d1e - fix headline for non-socket support 2015-12-27 13:33:53 +01:00
Dirk Wetter eb66955c96 Update Readme.md 2015-12-24 23:13:20 +01:00
Dirk e10da3a78a - minor adjustmentents to program style 2015-12-24 23:00:23 +01:00
Dirk Wetter a0e91964d8 Update CREDITS.md 2015-12-24 12:41:52 +01:00
Dirk 5c19bf5892 - fix for web sites having leading spaces b4 html/xml content starts 2015-12-22 21:08:52 +01:00
Dirk c3269f1927 - Fixes for #260 2015-12-22 20:31:52 +01:00
Dirk Wetter f65fa69c3c Merge pull request #248 from lainegholson/master 
Add HTTP2/ALPN support
 2015-12-22 12:05:53 +01:00
Dirk Wetter 0d53013c47 Merge pull request #260 from seccubus/feature/redirect_test 
Redirect test that doesn't depend om JSON/CSV output
 2015-12-21 21:14:13 +01:00
Dirk bac7cde3bd - re-adjusted preference for rfc/iana mapping file 2015-12-11 13:13:22 +01:00
Dirk 5ff5a189fb better place for mapping file 2015-12-08 17:53:46 +01:00
Dirk 867d698a16 - days left until expiration 2015-12-08 17:51:46 +01:00
Dirk 1f39ab8241 - fix timestamp in log file 2015-12-08 16:37:35 +01:00
Dirk 041b77c5ed - sanity check whether URL/URI is last arg 
- typo fix while logging (fall back CVS tags weren't written
 2015-12-08 13:31:52 +01:00
Dirk 2e0e7b83d5 reverse non-typo 
drill comes later
 2015-11-28 17:33:10 +01:00
Dirk Wetter ad8f82f190 Merge pull request #240 from k0ste/master 
Add drill support (ldns lib), fix mistype
 2015-11-28 17:14:18 +01:00
Dirk Wetter 7113039daa Merge pull request #241 from lainegholson/master 
Show SHA384 certificates as secure
 2015-11-27 21:09:08 +01:00
Dirk f76d07d43e - logging now the cmd line, FIX #238 
- internal improvements of stdout banner
 2015-11-21 13:39:37 +01:00
Dirk Wetter 3d869920d0 Merge pull request #237 from lainegholson/master 
Fix filename typo
 2015-11-15 16:00:37 +01:00
Dirk Wetter 10422f927a Merge pull request #235 from alarmschaben/master 
Lamest pull request ever: fixed typo in parameter descriptions
 2015-11-13 07:54:01 +01:00
Dirk 0bb795abe2 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-11-11 17:50:00 +01:00
Dirk 5749051839 - fix vertical distances after PFS && wide 
- fix misleading "--ip=v4only" in help
 2015-11-11 17:49:36 +01:00
Dirk Wetter 92666b8a16 Update Readme.md 2015-11-11 12:10:56 +01:00
Dirk 756a6ab41d - NEW: logging of stdout! 
- rearragments in global var declaration for better readability
 2015-11-11 11:56:32 +01:00
Dirk 87592aafd9 - line space for some single vuln. adjusted 2015-11-08 22:14:28 +01:00
Dirk Wetter 4ac7713a22 Merge pull request #229 from lainegholson/master 
mDNS Fixes
 2015-11-08 22:02:38 +01:00
Dirk Wetter 2abad4c258 Update Readme.md 2015-11-05 08:37:48 +01:00
Dirk Wetter eeceece212 add '-bugs' so that buggy F5s can be better tested 2015-11-03 23:30:52 +01:00
Dirk Wetter 50c5f0b93d add '-bugs' so that buggy F5s can be better tested 2015-11-03 23:29:53 +01:00
Dirk e390345629 typo 2015-11-03 19:51:45 +01:00
Dirk c272878c73 - warning session tickets -> PFS 2015-11-03 19:51:05 +01:00
Dirk Wetter 3a28349e22 Update Readme.md 2015-11-03 13:15:19 +01:00
Dirk 8ff39c5028 - client based authentication, FIX #215 
- SSL Session ID support test
 2015-11-03 13:13:10 +01:00
Dirk 0463471c40 - fixing side effect from #225 
- other minor output corrections
 2015-11-03 10:30:59 +01:00
Dirk 84e6be3547 - revert part of #225 
- clarify name of bool var for type of tput
 2015-11-02 10:49:40 +01:00
Dirk Wetter 8b54609c3d Merge pull request #225 from Harinus/master 
Fix: tput: No value for $TERM and no -T specified
 2015-11-02 10:40:59 +01:00
Dirk Wetter 2b49f9204d Update CREDITS.md 2015-11-01 19:40:20 +01:00
Dirk Wetter 1097beab12 Merge pull request #227 from lainegholson/master 
Add support for .local domains with avahi
 2015-11-01 19:37:28 +01:00
Dirk Wetter 84ad7d9b69 client auth + Peter 2015-10-26 09:56:33 +01:00
Dirk Wetter 0009107947 Merge pull request #224 from PeterMosmans/cygwin-2 
Added check for availability oftput (Fixes #222)
 2015-10-25 13:37:20 +01:00
Dirk Wetter 5fd6e28f09 Merge pull request #221 from wlovins/master 
Changed wording for easier readability.
 2015-10-16 16:02:07 +02:00
Dirk 7bf1319c93 - FIX #218 for exim and friends 2015-10-15 15:14:37 +02:00
Dirk eb49132682 - changed headline for each sub test from blue to underline+bold 
- save determine_service log
 2015-10-15 14:15:07 +02:00
Dirk 78fab8addb - FIX #213, wording 2015-10-13 22:25:01 +02:00
Dirk d4dbf1138c - FIX #214 2015-10-13 08:31:54 +02:00
Dirk Wetter 2b14455c55 client auth added 2015-10-11 23:41:05 +02:00
Dirk 1a1f007ef9 - banner f'up reversed 2015-10-11 23:34:53 +02:00
Dirk 8c0786d147 - switched on clientauth functionality (missed b4) 2015-10-11 23:23:35 +02:00
Dirk b9bfd48871 - client based auth (see sclient_connect_successful() works now, see #206) 
- careful regression tests for this, point open: speed
- test for more TLS extensions
- heartbleed() does now before a check whether heartbeat is available to save time
- breach simplyfied (and doesn't have to be killed in seldom cases)
- tmpfiles are only being erased after exit not after each function
- user agent is testssl -- unless --sneaky is chosen
- global host vars are now being resetted to prevent side effects
- tls version in record layer is now always 1
- used ERRFILE wherever possible
- smaller code cleanups
 2015-10-11 23:07:16 +02:00
Dirk Wetter 379bc9464a Update Readme.md 2015-10-11 11:47:10 +02:00
Dirk Wetter 4eacc75f2d Merge pull request #209 from jumanjiman/docker_readme 
Readme: add link(s) to external contrib, such as docker images
 2015-10-11 10:03:19 +02:00
Dirk Wetter 0600e39b45 - fix screw up of rDNS display for those few folks having only IPv4 ;-) 2015-10-06 12:30:29 +02:00
Dirk a3a15aa11e Merge branch 'master' of github.com:drwetter/testssl.sh 2015-10-05 09:59:22 +02:00
Dirk f8d6a2fb6d - IPv6 formatting fixed, see #11 (points 3,4,5) 
5 cannot be done automagically, see issue
 2015-10-05 09:56:21 +02:00
Dirk Wetter fc46a61733 Update Readme.md 2015-10-05 09:22:02 +02:00
Dirk Wetter 8b917e6625 Update Readme.md 2015-10-05 09:19:11 +02:00
Dirk a0d634f94a - ouput corrections for BEAST 2015-10-04 12:32:29 +02:00
Dirk 41bc2fb70c - regression wrt what_dh 2015-10-03 00:14:52 +02:00
Dirk Wetter 5d230edb3a Merge branch 'master' of github.com:drwetter/testssl.sh 2015-10-01 13:29:25 +02:00
Dirk Wetter f3cef41053 - some speed improvements (sed, tr --> bash internal s'n'r) 
- revamped BEAST a bit: availablity of higher protocols lead now to yellow color, see #208
- Fixed error in BEAST (no higher protos led to no message)
- made BEAST it faster: one check for protocol ssl3+tls1 upfront, see #208
 2015-10-01 13:27:14 +02:00
Dirk Wetter 8648398094 Update CREDITS.md 2015-10-01 13:19:15 +02:00
Dirk Wetter fd256a74b1 Merge pull request #207 from typingArtist/beast 
Fix CBC cipher selection for BEAST detection
 2015-10-01 11:51:16 +02:00
Dirk 1c1eaa53d8 - fix for renamed http_header function 2015-09-29 18:47:49 +02:00
Dirk cac49cb1f1 - "--file" implicitly does "--warnings=batch" 
- "--file" works now fine with equal sign
- fixed load balancer issue where header request stalled and testssl.sh consequently too
- http_date needed to be changed too because of that
- needed to estimate then the http_date when request was killed (HAD_SLEPT)
  will Mr. Spock like this??
- fixed load balancer issue where header request for breach test stalled and thus an error was displayed
- code improvements
 2015-09-28 22:54:00 +02:00