40baa7c163
- FIX (regression): -V
...
- logic of some ENV variables changed (attention!)
- included some ENV as long options (not in the help yet)
- decentralized http check for breach
- if openssl is not executable it bails out better now
- help function now exits
2015-04-13 22:55:40 +02:00
07394d2d17
Merge branch 'master' of github.com:drwetter/testssl.sh
2015-04-10 15:16:20 +02:00
b8384eceff
- underline CN, SAN and issuer deutschepost case (see sourceforge.net/p/ssllabs/mailman/message/33764851/)
2015-04-10 15:15:47 +02:00
79ee5b377a
Update Readme.md
2015-04-10 10:13:30 +02:00
b670c01f36
Update Readme.md
2015-04-09 22:24:57 +02:00
b0c68d4429
FIX: missing server preferences, NEW: each cipher server preferences per protocol!
2015-04-09 22:08:48 +02:00
9945ef0e81
-
2015-04-09 21:45:22 +02:00
5051eb3d5d
- fixes to changes from Peter's better cmd line parsing
...
- cosmetc improvements (vulneraibilities)
2015-04-09 21:42:52 +02:00
cb98920733
Merge pull request #79 from PeterMosmans/refactoring
...
Refactored major parts of code
2015-04-09 21:38:29 +02:00
28518abb55
Removed GNU getopt
...
Minor fix to --poodle option
2015-04-07 18:05:52 +10:00
2009cfef26
Refactored major parts of code
...
Note that due to the refactoring of some status messages, the output will be slightly different (more verbose) than previous versions
Moved specific status messages to http_header()
Moved specific status messages to breach()
Moved specific status messages to ccs_injection()
Moved specific status messages to heartbleed()
Moved specific status messages to renego()
Moved specific status messages to crime()
Moved specific status messages to tls_poodle()
Moved specific status messages to freak()
Moved specific status messages to beast()
Added some more documentation for functions
Fixed typos in help
Created new function main:
This is the main function of testssl.sh
Refactored major part of the original main function
Created new function startup:
Parses the startup options
Created new function intialize_globals:
Initializes all used global variables
Created new function scanning_defaults:
Sets default scanning options when only one parameter (URI) is given
TODO: Refactor more/duplicate parts of functions
Note: For the new functions, fixed spaces (4) are used instead of tabs
2015-04-07 17:00:43 +10:00
44b31a1c54
FIX #80 : show HTTP 401
2015-04-02 13:35:22 +02:00
80f932ca30
NEW: added security headers
2015-04-02 13:04:57 +02:00
9ea84ee6ec
- got rid of "strings"
2015-04-02 12:19:24 +02:00
348f651fc8
- updated binaries from Peter. Necessary because handshake under rare circumstances
...
failed (routines:tls1_setup_key_block:cipher or hash unavailable:t1_enc.c:802.
SLES 12 server, some ciphers under TLS 1.2
2015-04-02 11:46:12 +02:00
7b9c125046
protocol check via sockets now also for SSLv3
2015-03-31 10:34:30 +02:00
5e9bb1c7e2
cleanups / bsd date in tls time
2015-03-30 23:09:19 +02:00
74b6bd7241
rechi
2015-03-30 15:03:29 +02:00
9bd1b44270
open fixes from Rechi (pull request $67)
2015-03-30 14:59:44 +02:00
77fd58e556
Merge pull request #75 from feld/tr
...
Using square brackets in tr results in trying to match/replace them
2015-03-19 09:14:54 +01:00
c0e6777666
Merge pull request #76 from feld/printf
...
Fix variable directly referenced in printf
2015-03-19 09:14:32 +01:00
1791af3659
Fix variable directly referenced in printf
2015-03-18 15:43:06 -05:00
bd95459c8d
Using square brackets in tr results in trying to match/replace them
2015-03-18 15:42:21 -05:00
7157d094bb
Дилян
2015-03-17 22:14:05 +01:00
485f0f8080
- FIX for 3des cipher report (thx Дилян)
2015-03-17 22:12:25 +01:00
1de535cc25
- added two pairs of ciphers to server preference (thx Dilian)
2015-03-17 22:02:23 +01:00
79396acf97
- working tls handshake with bash sockets (not yet in production, hint: see option "-q" in the bottom)
2015-03-17 18:11:18 +01:00
c4877799ec
- check whether openssl is executable
...
- spaces to tabs
- adding hint to "aha" in help
2015-03-17 15:14:58 +01:00
761e854610
- FIX for date --> applied to other BSD systems too
...
- FIX for SNI output as it doensn';t make sense for non HTTP servives
- lines for RC4 and PFS shortenedA
- display all MX records to test before testing
- removed LOCERR, added CCS_MAX_WAITSOCK, HEARTBLEED_MAX_WAITSOCK
2015-03-17 12:22:21 +01:00
c8090600b6
- some internal code internal cleanups
...
- minor cosmetic output corrections
- preparation for bash sockets for SSLv3 to TLS 1.2
2015-03-16 00:22:51 +01:00
41c4ed94c1
further improvements through shellcheck
2015-03-15 16:59:29 +01:00
639258cfe0
FIX #74 for sed BSD: doesn't like inline \n
...
headline for BEAST was missing
2015-03-15 16:10:14 +01:00
c2ece82d9b
- FIX: regression for wc -l w/o cat (3x)
...
- removal of unneccessary waitpid, inline
2015-03-15 14:41:34 +01:00
bdd0602c1f
- prework for checking hpkp fingerprints
2015-03-15 10:18:37 +01:00
7d43dd7c8a
- Shellcheck static analysis by Mark
2015-03-15 09:04:49 +01:00
06268de428
Merge pull request #73 from feld/master
...
Shellcheck static analysis
2015-03-15 08:56:01 +01:00
5478fe14e7
Make date command work with both Linux and FreeBSD
2015-03-13 15:51:50 -05:00
b57d535341
Merge branch 'master' of github.com:feld/testssl.sh
2015-03-13 15:24:37 -05:00
fa83aa33c4
more ps >/dev/null fixes
...
more useless cat
2015-03-13 15:24:16 -05:00
4f6e94ab29
More useless cat
2015-03-13 15:19:47 -05:00
541788fcad
Remove 2>&1 for the ps $pid lines; it's unnecessary
2015-03-13 15:16:21 -05:00
69dfc1f322
Merge branch 'master' of github.com:feld/testssl.sh
2015-03-13 15:12:45 -05:00
268b3b02f4
Remove useless kittens
2015-03-13 15:10:36 -05:00
6747974bc3
Revert to 2>&1 > /dev/null order because it isn't behaving correctly.
2015-03-13 14:56:30 -05:00
f530eaf5fc
Replace expr with $(( ))
...
https://github.com/koalaman/shellcheck/wiki/SC2003
2015-03-13 14:54:36 -05:00
846dbad3d2
Fix missing single quote
2015-03-13 14:26:02 -05:00
95b842ee49
Fix order of the redirect
...
https://github.com/koalaman/shellcheck/wiki/SC2069
2015-03-13 10:00:14 -05:00
4b513de6c0
Replace backticks with $(..)
...
https://github.com/koalaman/shellcheck/wiki/SC2006
2015-03-13 09:52:39 -05:00
d31b517b31
- @feld
2015-03-13 12:21:06 +01:00
dc05ff9b13
- FIX garbled output for servers with a TLS reply on SSLv2 socket call
2015-03-13 12:20:19 +01:00
