Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
5,544 Commits 16 Branches 39 Tags
437e1a3c83176095cdc27703ab75fad33f075aab
Commit Graph
5544 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk Wetter 437e1a3c83 Try to redirect /dev/null to stdin 
... in orser to try preventing s_server to die .

Doesn't work locally.
 2026-09-06 20:21:04 +02:00
Dirk Wetter e925f054d7 fix -quiet 
It doesn't exist on MacOS' LibreSSL and on older OpenSSL. The
server started locally because the keys were already present.
 2026-09-06 17:42:17 +02:00
Dirk Wetter ca9f3746fe Another try 
- remove -naccept as it was futile
- fix identation
- kill the server when run locally (perl's PID was wrong)
- quiet key generation

This works on both Linux and Mac locally (except some debug stuff unser MacOS)
 2026-09-06 15:03:38 +02:00
Dirk Wetter d715595276 Readd sleep command when trying to start server 2026-09-06 13:06:43 +02:00
Dirk Wetter 17b806ecd3 Add debug statements ... 
in order to find out why it works on regular Linux machines and not on
Github. One guess was different network namespace. However it fails
alos on MacOS .

Also, as I changed the hostname "localhost" to 127.0.0.1 before, I
at least wanted to add the IP address to SAN.
 2026-09-06 11:30:01 +02:00
Dirk 6a36350d50 Try fix problems 
- MacOS: LibreSSL doesn't understand -naccept, so we use homebrew's OpenSSL
- Ubuntu: No idea why that still fails. Maybe the DNS setup is borked, so that scanning and listening is split between IPv4 and IPv6 (weak guess)
 2026-09-04 16:16:38 +02:00
Dirk f08f887ae5 remove file triggers which do not exist 2026-09-04 00:50:49 +02:00
Dirk 75c35bdbc7 fix error (server stopped) 
... , exec server with log and started testssl differently
 2026-09-04 00:49:33 +02:00
Dirk Wetter 6c735af807 Fix connect and other problems 
The previous commit held the socket open in the perl 1..30 loop
which prevented later on testssl.sh to scan.

Also the subtets is gone . It removes and addiotional message which
was confusing.
 2026-09-03 19:10:57 +02:00
Dirk Wetter 4b909a76bc Use IO::Socket::INET instead of IPC::Run 
- hardcode days and protocol as they don't matter
- got rid of the ugly system call with nc
 2026-09-03 16:18:19 +02:00
Dirk Wetter 9b7cddf98a Add modules 2026-09-03 16:17:46 +02:00
Dirk Wetter 9821679938 Provide short unit test for TLS 1.3 only host 
Only the protocol section for now

https://github.com/testssl/testssl.sh/issues/756#issuecomment-5302724956
 2026-09-03 13:12:08 +02:00
Dirk WetterandGitHub 9e09f10380 Merge pull request #3131 from testssl/perl_quality 
Add Perl static analysis
 2026-09-01 20:02:32 +02:00
Dirk 8eb05bd862 '$' should be passed to the shell not '\$' 
... thus not double quoting like \\$
 2026-09-01 16:58:14 +02:00
Dirk c312fb8230 Audit all modules 
but let for now exit the check always with zero
 2026-09-01 16:29:16 +02:00
Dirk bd67671fad double quoting needed in passed expression to grep 2026-09-01 16:19:52 +02:00
Dirk 6b1de564d8 Make the flow finally(TM) work 2026-09-01 15:49:31 +02:00
Dirk 4bab452316 Fix syntax error 2026-09-01 15:42:43 +02:00
Dirk 1880a06110 Enable warnings 2026-09-01 15:27:44 +02:00
Dirk 7e1cd8a8c4 Add "use warnings" + correct subroutine prototypes declaration 2026-09-01 15:21:10 +02:00
Dirk 8ab28557a1 Add "use warnings" 2026-09-01 15:18:46 +02:00
Dirk 71322d89cb Squash complains by perlcritic 
and enable warnings
 2026-09-01 15:07:52 +02:00
Dirk Wetter d857e0fe60 Add .perlcritic policy overrides for test suite 2026-08-31 23:26:36 +02:00
Dirk Wetter 23129834b9 Add all other perl modules too 2026-08-31 22:04:07 +02:00
Dirk Wetter a2027d527f fix perttidy and cpan-audit 2026-08-31 20:50:00 +02:00
Dirk Wetter f77dcbefd5 Selfcheck removed 
(not sure whether that was right to try in the first place, probably not)
 2026-08-31 20:35:02 +02:00
Dirk Wetter d58557b430 Newer versions 
- use newer checkout hash
- use appropriate perl version
 2026-08-31 20:30:35 +02:00
Dirk Wetter f5d228e28e Add Perl static analysis 
* Run perl -c on every t/*.t file as a fast pre-check before prove.
* Add Perl::Critic (a curated policy set) and perltidy --check for the Perl test code — the repo lints its bash with shellcheck but has zero linting for its Perl.
* Add Test::NoWarnings (and/or Test::Fatal) to the test harness so warnings/exceptions in the code under test fail the build.

Not yet sure about using the hash / SHA-pinning. To be reconsidered later
 2026-08-31 20:05:30 +02:00
Dirk WetterandGitHub 978c399798 Merge pull request #3126 from ChrisJr404/banner-utc-offset 
Show the UTC offset in the start and done banner
 2026-08-31 11:02:38 +02:00
Chris (ChrisJr404) fa53ee74e4 Normalize the UTC offset in the Start and Done banners in 32_isHTML_valid.t 2026-08-30 19:29:54 -04:00
Dirk WetterandGitHub fef1f43aff Merge pull request #3129 from dcooper16/declare_jsonID 
Declare jsonID
 2026-08-30 21:48:45 +02:00
David CooperandGitHub a9075ef932 Declare jsonID 
As reported in #3128, there are a few instances in which `jsonID` is used, but is not declared as a `local` variable. This commit fixes that problem.

In addition, for consistency, it changes `run_sweet32()` to use `$jsonID` rather than the hard coded string "SWEET32".
 2026-08-30 11:54:16 -07:00
Dirk WetterandGitHub 853850e3f4 Merge pull request #3125 from testssl/CA_store_update_2608 
CA store update 2608
 2026-08-28 10:42:04 +02:00
Dirk Wetter 639f45e8d0 Update 2026/08 2026-08-28 00:59:31 +02:00
Dirk Wetter 296575029d Still MS.pem still contains DST Root CA X3 2026-08-28 00:58:59 +02:00
Chris (ChrisJr404) 28a2c77257 Label the timezone offset in the start and done banner 2026-08-26 11:42:12 -04:00
Chris (ChrisJr404) 978c3964d2 Show the UTC offset in the start and done banner 2026-08-24 17:36:45 -04:00
Dirk Wetter 2571730bb1 2026-08-13 from https://curl.haxx.se/docs/caextract.html 2026-08-24 19:45:28 +02:00
Dirk Wetter f9d6355002 store from jdk-25.0.4.1 
from https://download.oracle.com/java/25/latest/jdk-25_linux-x64_bin.tar.gz
 2026-08-24 19:43:12 +02:00
Dirk Wetter 5461110ac4 store from today via git repo 2026-08-24 19:42:19 +02:00
Dirk Wetter 74bfffecae DL link for JDK, --depth=1 for Apple repo 2026-08-24 19:39:32 +02:00
Dirk WetterandGitHub 6d555cac4e Merge pull request #3118 from testssl/dependabot/github_actions/shogo82148/actions-setup-perl-1.43.1 
Bump shogo82148/actions-setup-perl from 1.42.0 to 1.43.1
 2026-08-24 10:52:03 +02:00
Dirk WetterandGitHub 5894d76a63 Merge pull request #3119 from testssl/dependabot/github_actions/docker/login-action-4.6.0 
Bump docker/login-action from 4.5.2 to 4.6.0
 2026-08-24 10:50:22 +02:00
Dirk WetterandGitHub ff51c14b52 Merge pull request #3123 from dcooper16/cleanup3120 
Cleanup #3120
 2026-08-24 10:49:22 +02:00
David Cooper ac7294182b Cleanup #3120 
This commit cleans up PR #3120. It replaces two long "if" statements with "case" statements and it removes a second declaration of "nr_cert_types" in run_server_defaults().
 2026-08-22 13:30:20 -07:00
Dirk WetterandGitHub 1283aff3d4 Merge pull request #3120 from dcooper16/slhdsa 
Support SLH-DSA server keys
 2026-08-15 16:27:02 +02:00
David b662a0f746 Support SLH-DSA server keys 
This commit adds support for server certificates that have SLH-DSA public keys. The code points come from https://datatracker.ietf.org/doc/draft-reddy-tls-slhdsa/. These code points were added to OpenSSL 4.1.0-dev by https://github.com/openssl/openssl/pull/31248.
 2026-08-14 15:31:33 -07:00
dependabot[bot]andGitHub 876c7f5c77 Bump docker/login-action from 4.5.2 to 4.6.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.5.2...v4.6.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-12 00:23:07 +00:00
dependabot[bot]andGitHub 6653ba7724 Bump shogo82148/actions-setup-perl from 1.42.0 to 1.43.1 
---
updated-dependencies:
- dependency-name: shogo82148/actions-setup-perl
  dependency-version: 1.43.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-12 00:23:00 +00:00
Dirk WetterandGitHub 06adbdccc5 Merge pull request #3115 from testssl/dependabot/github_actions/shogo82148/actions-setup-perl-1.42.0 
Bump shogo82148/actions-setup-perl from 1 to 1.42.0
 2026-08-11 19:20:11 +02:00