Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 05:38:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,593 Commits 17 Branches 39 Tags
3d2bd5020cd49d280fcb960fc95cef5cb20d2e1a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk 3d2bd5020c fix spellcheck 2024-09-06 13:00:27 +02:00
Dirk 12bc15adc3 misc 
- remove 1xLF in UI
- fix obsolete statment for OPENSSL2
 2024-09-06 12:53:00 +02:00
Dirk becd310390 Address open UI problems for TLS 1.3 only hosts 
While in 3.2 there was only a hint how to deal with TLS 1.3 only hosts, a restart
with --openssl=/usr/bin/openssl or setting of OSSL_SHORTCUT-true was required.

This PR changes the behavior: if an openssl version can be found in /usr/bin/openssl
(or SUPPLIED via OPENSSL2=/home/version/ofopenssl testssl <cmdline>) which
supports TLS 1.3 it switches automatically and informs the user that it has done so.
   This message is asynchonous and is implemented with a new function check_msg()
and a global OPEN_MSG, so that we maintain the formatting. Otherwise it would have
appeared between rDNS and service detection. Now it's nicely after service detection.
 2024-09-06 12:47:03 +02:00
Dirk WetterandGitHub a20fd796e8 Merge pull request #2552 from drwetter/fix_2466 
Trailing space after value in header is fine
 2024-09-03 20:51:18 +02:00
Dirk WetterandGitHub 031c2a55ec Merge pull request #2553 from drwetter/noCtrlCharInHeader 
Remove crtl chars from HTTP header
 2024-09-03 20:50:18 +02:00
Dirk WetterandGitHub 3cd027e1f1 Merge pull request #2551 from drwetter/banner 
Improve banner (3.2)
 2024-09-03 19:27:46 +02:00
Dirk 2b36b33112 Remove crtl chars from HTTP header 
... which fixes #2337
 2024-09-03 19:24:46 +02:00
Dirk 30a33e9a6e Trailing space after value in header is fine 
This fixes #2466.
 2024-09-03 19:10:29 +02:00
Dirk dbb8fc8013 Fix CI 2024-09-03 18:28:56 +02:00
Dirk 408e8f84f4 modify issue template for bash version 2024-09-03 15:42:54 +02:00
Dirk 5a1fd2623f Improve banner (3.2) 
... for readability and bugs to be filed (fixes #2506)

This PR defines a short string for the OpenSSL banner as some suppliers have made them (unnecessarily) long so that it won't fit nice in the banner anymore.

The banner also now omits the built line from openssl as for the user it is normally not important.
 2024-09-03 15:40:55 +02:00
Dirk WetterandGitHub e59a0f202f Merge pull request #2549 from drwetter/drwetter-patch-1 
Ignore Dockerfile.git
 2024-09-03 12:46:28 +02:00
Dirk WetterandGitHub 5becbd0625 Merge pull request #2548 from drwetter/drwetter-patch-2 
Update Dockerfile.git
 2024-09-03 12:46:05 +02:00
Dirk WetterandGitHub 1443c62036 Ignore Dockerfile.git 
... for CI run
 2024-09-03 12:44:45 +02:00
Dirk WetterandGitHub e7c0173f8c Merge pull request #2547 from drwetter/drwetter-patch-1 
Update to leap 15.6
 2024-09-03 12:42:22 +02:00
Dirk WetterandGitHub 79e199e736 Update Dockerfile.git 
to use an up to date Alpine version
 2024-09-03 12:41:09 +02:00
Dirk WetterandGitHub a9fcf443fa Update to leap 15.6 
as EOL for 15.5 is not very far away
 2024-09-02 17:52:27 +02:00
Dirk WetterandGitHub b132a26432 Merge pull request #2544 from NaN-KL/patch-1 
Fix: Reporting (Not Ok) for ClientHello/ServerHello errors
 2024-08-26 18:14:23 +02:00
Dirk WetterandGitHub 4d70c7b82a Merge pull request #2545 from drwetter/fix_2542 
fix typo
 2024-08-26 10:40:35 +02:00
Dirk Wetter 5eb829e6d6 fix typo 2024-08-26 10:38:37 +02:00
Dirk WetterandGitHub f3f6dae8c1 Merge pull request #2540 from drwetter/dependabot/github_actions/docker/build-push-action-6.7.0 
Bump docker/build-push-action from 6.5.0 to 6.7.0
 2024-08-14 16:29:53 +02:00
Dirk WetterandGitHub 009e358341 Merge pull request #2528 from drwetter/update_CAstores 
Update Truststores
 2024-07-23 12:11:54 +02:00
Dirk 76902af3b8 update hashes 2024-07-23 11:35:49 +02:00
Dirk 69c1a2fcb8 need to update hashes needs to be earlier 2024-07-23 11:35:16 +02:00
Dirk 778aab0241 dos2unix 2024-07-23 11:34:38 +02:00
Dirk 95ed863ac0 update MS CA root store 2024-07-23 10:42:14 +02:00
Dirk WetterandGitHub 67f555e15b Merge pull request #2533 from drwetter/dependabot/github_actions/docker/login-action-3.3.0 
Bump docker/login-action from 3.2.0 to 3.3.0
 2024-07-23 10:06:09 +02:00
Dirk WetterandGitHub 04280396f6 Merge pull request #2532 from drwetter/dependabot/github_actions/docker/setup-qemu-action-3.2.0 
Bump docker/setup-qemu-action from 3.1.0 to 3.2.0
 2024-07-23 10:05:27 +02:00
Dirk WetterandGitHub 4499ef5e13 Merge pull request #2534 from drwetter/dependabot/github_actions/docker/build-push-action-6.5.0 
Bump docker/build-push-action from 6.4.1 to 6.5.0
 2024-07-23 10:05:06 +02:00
Dirk WetterandGitHub fa9fe27ae6 Merge pull request #2530 from drwetter/fix_ipv6_ula_and_more 
Fix IPv6 addresses
 2024-07-22 23:31:37 +02:00
Dirk dd66449a45 Fix IPv6 addresses 
Local and ULA and more IPv6 adresses were incorrectly filtered by ``awk '/^[0-9]/ { print $1 }'``
which searches in the first term for only numeric values.

The PR adds a-f and fixes #2529 .
 2024-07-22 21:07:50 +02:00
Dirk 472eff85b1 Update Apple CA store 
...and modify readme to reflect that the certificates are better to retrieve from GH
 2024-07-22 17:08:18 +02:00
Dirk 3a9c0aa8ed Update Truststores 
- Mozilla: 2024-7-02
- Debian 12, ca-certificates from 20230311
- JDK 21.04

See also #2525

ToDo:
- Apple (https://opensource.apple.com/source/security_certificates/ doesnt exist anymore), github?
- MS
- Check old LE CA
- update hashes
- update Readme
 2024-07-22 16:38:45 +02:00
Dirk WetterandGitHub 1dbd9b8b78 Merge pull request #2524 from drwetter/dependabot/github_actions/docker/build-push-action-6.4.1 
Bump docker/build-push-action from 6.4.0 to 6.4.1
 2024-07-18 09:09:13 +02:00
Dirk WetterandGitHub 8cb483c4da Merge pull request #2523 from drwetter/dependabot/github_actions/docker/build-push-action-6.4.0 
Bump docker/build-push-action from 6.3.0 to 6.4.0
 2024-07-16 11:17:27 +02:00
Dirk WetterandGitHub 5696243616 Merge pull request #2520 from drwetter/dependabot/github_actions/docker/setup-qemu-action-3.1.0 
Bump docker/setup-qemu-action from 3.0.0 to 3.1.0
 2024-07-04 12:42:20 +02:00
Dirk WetterandGitHub 94f4b57b77 Merge pull request #2519 from drwetter/dependabot/github_actions/docker/build-push-action-6.3.0 
Bump docker/build-push-action from 6.2.0 to 6.3.0
 2024-07-04 12:41:46 +02:00
Dirk WetterandGitHub bcb2ef373b Merge pull request #2517 from drwetter/dependabot/github_actions/docker/build-push-action-6.2.0 
Bump docker/build-push-action from 6.1.0 to 6.2.0
 2024-06-28 15:04:12 +02:00
Dirk WetterandGitHub 5c8ccb4f81 Merge pull request #2515 from drwetter/dependabot/github_actions/docker/build-push-action-6.1.0 
Bump docker/build-push-action from 6.0.2 to 6.1.0
 2024-06-24 18:27:03 +02:00
Dirk WetterandGitHub 5452325885 Merge pull request #2513 from drwetter/dependabot/github_actions/docker/build-push-action-6.0.2 
Bump docker/build-push-action from 5.4.0 to 6.0.2
 2024-06-21 18:38:56 +02:00
Dirk WetterandGitHub 4688295d24 Update bug_report.md 2024-06-13 18:49:47 +02:00
Dirk WetterandGitHub 90c6903a27 Merge pull request #2501 from drwetter/dependabot/github_actions/docker/build-push-action-5.4.0 
Bump docker/build-push-action from 5.3.0 to 5.4.0
 2024-06-13 16:14:53 +02:00
Dirk WetterandGitHub a6898acf7d Merge pull request #2504 from dcooper16/fix2502 
Fix #2502
 2024-06-13 16:13:55 +02:00
Dirk WetterandGitHub c2a322419c Update pull_request_template.md 
typo fixes
 2024-06-13 10:35:17 +02:00
Dirk WetterandGitHub bae14b1208 Update bug_report.md 2024-06-13 10:32:36 +02:00
Dirk WetterandGitHub d90728157f Update feature_request.md 2024-06-13 10:30:37 +02:00
Dirk WetterandGitHub c8220e8b8b Update feature_request.md 
For 3.0.x we don´t accept new features
 2024-06-13 10:28:59 +02:00
Dirk WetterandGitHub 5b75dd7f01 Merge pull request #2498 from drwetter/dependabot/github_actions/docker/login-action-3.2.0 
Bump docker/login-action from 3.1.0 to 3.2.0
 2024-05-29 10:55:01 +02:00
Dirk WetterandGitHub b22f9cb501 Merge pull request #2497 from drwetter/fix_2496 
Supply overwrite option to --file/-iL with warnings off
 2024-05-26 17:37:44 +02:00
Dirk ed087197fe Add docu for #2497 2024-05-24 14:00:59 +02:00
Dirk 0d5bb1cd17 mute codespell 2024-05-24 14:00:39 +02:00
Dirk 5af152d575 Address overwrite option to --file/-iL with warnings off 
When choosing --file or -iL warnings were set in any case to --batch which
needs e.g. crurrenly an interaction when do bacth scanning. This PR enables
to supply WARNINgs / --warnings =off before so that the intercation is mot
needed.

See also #2496.
 2024-05-24 13:53:09 +02:00
Dirk WetterandGitHub e3b3c358fd Merge pull request #2492 from drwetter/fix2490_add 
Add / improve #2490
 2024-04-26 16:31:12 +02:00
Dirk e49747ca14 Add / improve #2490 2024-04-26 16:29:43 +02:00
Dirk WetterandGitHub 7eadfd12fb Merge pull request #2491 from drwetter/fix2490_add 
Add / improve #2490
 2024-04-26 16:11:45 +02:00
Dirk a3d3133c59 Add / improve #2490 2024-04-26 16:10:03 +02:00
Dirk WetterandGitHub 4ca02764fa Merge pull request #2490 from Blyzz616/3.2 
Update testssl.sh
 2024-04-25 09:55:15 +02:00
Dirk WetterandGitHub 5581499da5 Merge pull request #2487 from Tazmaniac/renego-fix3 
[Client Renego] Small important fixes
 2024-04-02 11:15:12 +02:00
Dirk WetterandGitHub 979a22c126 Merge pull request #2480 from drwetter/dependabot/github_actions/docker/build-push-action-5.3.0 
Bump docker/build-push-action from 5.2.0 to 5.3.0
 2024-03-15 11:48:46 +01:00
Dirk WetterandGitHub 375ddf565c Merge pull request #2475 from Tazmaniac/renego_timing_fix2 
Renego timing fix2
 2024-03-14 13:57:53 +01:00
Dirk WetterandGitHub 16efbd645c Merge pull request #2476 from akabe1/3.2 
Fix mtls option location in s_client_options() and code cleanup
 2024-03-14 10:13:57 +01:00
Dirk WetterandGitHub db9aa231f0 Merge pull request #2478 from drwetter/dependabot/github_actions/docker/login-action-3.1.0 
Bump docker/login-action from 3.0.0 to 3.1.0
 2024-03-14 09:51:26 +01:00
Dirk WetterandGitHub ed7bdf1571 Merge pull request #2477 from drwetter/dependabot/github_actions/docker/build-push-action-5.2.0 
Bump docker/build-push-action from 5.1.0 to 5.2.0
 2024-03-12 10:03:11 +01:00
Dirk WetterandGitHub a2fdfb011e Merge pull request #2474 from drwetter/mtls_beta 
Polish PR2461 (mTLS) + label as beta
 2024-02-28 10:22:11 +01:00
Dirk 55ae9bf248 Polish PR2461 (mTLS) + label as beta 
also revert #1383
 2024-02-27 15:59:16 +01:00
Dirk WetterandGitHub 94ef475255 Merge pull request #2461 from akabe1/3.2 
Add mTLS new feature to support scans with client authentication
 2024-02-27 15:47:03 +01:00
Dirk WetterandGitHub f84e8c05f5 Merge pull request #2470 from Tazmaniac/renego_timing_fix 
Correct client_renego timing bug.
 2024-02-21 17:17:51 +01:00
Dirk WetterandGitHub 32a279730f Merge pull request #2472 from Tazmaniac/zombies-fix-3.2 
Fix subshell killing to avoid zombies
 2024-02-20 10:03:19 +01:00
Dirk WetterandGitHub 19607d7c2c Merge pull request #2467 from Tazmaniac/mongodb-detection-fix 
MongoDB identification fix
 2024-02-13 17:15:01 +01:00
Dirk WetterandGitHub 62b5859d52 Merge pull request #2465 from Odinmylord/3.2 
Add SNI to ticketbleed check
 2024-02-09 09:56:58 +01:00
Dirk WetterandGitHub c30e541658 Merge pull request #2463 from janbrasna/fix-docker-md-quotes 
Fix Dockerfile.md formatting
 2024-02-02 20:25:46 +01:00
Dirk WetterandGitHub 7ec7f8cf32 Merge pull request #2460 from Tazmaniac/client-renego-regression 
Fixed regression in printing results
 2024-01-22 09:51:11 +01:00
Dirk WetterandGitHub ad04a90b2a Merge pull request #2459 from Tazmaniac/client-renego-fix 
Secure Client-Initiated Renegotiation : fixes/enhancements
 2024-01-18 18:37:58 +01:00
Dirk WetterandGitHub b6fdfb1986 Merge pull request #2458 from drwetter/drwetter-patch-1 
Create pull_request_template.md
 2024-01-10 19:28:22 +01:00
Dirk WetterandGitHub 6e84f5f139 Fill pull_request_template.md 2024-01-10 19:27:24 +01:00
Dirk WetterandGitHub 9a494b135c Create pull_request_template.md 2024-01-10 19:03:23 +01:00
Dirk WetterandGitHub 7c0c06641c Merge pull request #2437 from drwetter/disclaimer 
Disclaimer
 2024-01-10 12:22:34 +01:00
Dirk WetterandGitHub 810e870d16 Merge pull request #2454 from Odinmylord/3.2 
Make cert_keysize output consistent
 2024-01-10 12:21:42 +01:00
Dirk WetterandGitHub 69664cbabf Merge pull request #2455 from Odinmylord/fix_intermediate_cert 
add utf8 support to intermediate cert names
 2024-01-06 20:38:32 +01:00
Dirk WetterandGitHub 3f9cc7b6a5 Merge pull request #1871 from dcooper16/quit_on_cmd_line_errors 
Quit testssl.sh on all command line errors
 2023-12-24 15:34:00 +01:00
Dirk WetterandGitHub bbf770ac7f Merge pull request #2447 from Odinmylord/3.2 
Add Brainpool signature algorithms to output
 2023-12-24 14:00:42 +01:00
Dirk 23c2b24c3d MUST update hashes 2023-12-24 14:00:34 +01:00
Dirk WetterandGitHub 3d63b62c24 Merge pull request #2450 from drwetter/fix_stupid_umaskerror 
Bail out if user error bc of umask
 2023-12-23 15:02:20 +01:00
Dirk Wetter c5265e33b7 fix wrong temp file var 2023-12-23 13:13:16 +01:00
Dirk Wetter 3b5f2022b3 fix typo 2023-12-23 13:03:57 +01:00
Dirk Wetter 8e517e0a70 Bail out if user error bc of umask 
If a user chose a broken umask testssl.sh will start but emits
subsequent errors.

This patch adds two sanity checks whether it is allowed to create
and read files in the temp directory.

Fixes #2449
 2023-12-23 12:58:05 +01:00
Dirk WetterandGitHub 7829821010 Merge pull request #2441 from drwetter/dependabot/github_actions/docker/build-push-action-5.1.0 
Bump docker/build-push-action from 5.0.0 to 5.1.0
 2023-12-09 18:13:24 +01:00
Dirk WetterandGitHub 1a9a486474 Merge pull request #2438 from drwetter/wildcard 
Implement warning for wildcard match
 2023-11-10 19:41:08 +01:00
Dirk 81ba1fe818 Implement warning for wildcard match 
fixes #2122
 2023-11-10 15:37:13 +01:00
Dirk WetterandGitHub 654086782b wording, typos 2023-11-06 14:40:52 +01:00
Dirk WetterandGitHub b87634baa0 Disclaimer 2023-11-06 14:34:55 +01:00
Dirk WetterandGitHub f59f3bd64b Merge pull request #2436 from drwetter/fix_ProxyVar 
Fix output: PROXY string vs $PROXY variable
 2023-10-31 20:36:32 +01:00
Dirk cbb32d375b Fix output: PROXY string vs $PROXY variable 
See also #2428.
 2023-10-30 21:39:30 +01:00
Dirk WetterandGitHub a6f97454a4 Merge pull request #2425 from drwetter/drwetter-patch-1 
Use Alpine 3.18
 2023-10-30 17:53:57 +01:00
Dirk WetterandGitHub 0a8dd6827a Merge pull request #2433 from drwetter/fix_2429 
Fix weird bash globbing #2429
 2023-10-30 17:53:32 +01:00
Dirk a9103fdfee Put the redirection into the right spot 2023-10-30 15:27:37 +01:00
Dirk 92b28c5f1c Fix weird bash globbing #2429 
What was problematic was the error message when the certificate
stores were missing. This fixes it by redirecting the error
message to /dev/null so that if the sub function detects the missing
file it returns with an error by the program and not by executing
"basename"
 2023-10-30 15:11:10 +01:00
Dirk WetterandGitHub 40be025454 Use Alpine 3.18 
.. to at least be on par with 3.0
 2023-10-13 17:36:19 +02:00
Dirk WetterandGitHub f3c7eb4333 Merge pull request #2424 from drwetter/fix_utilLinux_Dockerfile 
Make sure util_Linux gets replaced as intended
 2023-10-13 17:33:25 +02:00
Dirk WetterandGitHub 781757f086 polish phrasing 2023-10-13 17:32:35 +02:00