Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,592 Commits 16 Branches 39 Tags
4775515bd764b27a9c270abd8b9789214e773088
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub c0cf622aff Merge pull request #600 from dcooper16/unsupported_ciphers_in_litegrey 
Print unsupported ciphers in light grey
 2017-01-30 18:29:57 +01:00
Dirk a7dff83160 $NODE is fine, removing $MX_HOSTNAME, #603 2017-01-29 10:46:35 +01:00
Dirk WetterandGitHub 1e16ac8ad6 Merge pull request #603 from AlGreed/2.9dev 
Better output for --MX in JSON-PRETTY
 2017-01-29 10:40:23 +01:00
Dirk WetterandGitHub 2ea3789b91 Merge pull request #602 from AlGreed/2.9dev 
Support of multiple servers for JSON-PRETTY
 2017-01-28 10:27:45 +01:00
Dirk WetterandGitHub 0bb792225e Merge pull request #599 from dcooper16/fix_tls_sockets_typo 
Fix typo in tls_sockets()
 2017-01-25 15:00:33 +01:00
Dirk WetterandGitHub bc31639179 Merge pull request #545 from dcooper16/cipher_order_sockets 
Use sockets to determine cipher order
 2017-01-24 20:26:05 +01:00
Dirk 2a5d56a9d6 help aviod misunderstanding, see #594 and some reordering 2017-01-24 08:37:19 +01:00
Dirk 4911aaf05b Fix #593 2017-01-23 11:33:18 +01:00
Dirk WetterandGitHub 8988411fbc Merge pull request #565 from dcooper16/run_server_preference_sockets 
Use sockets in run_server_preference()
 2017-01-21 19:55:37 +01:00
Dirk f80e1ecfdb - enable CAA per default (#588) 
- hex2ascii() for converting strings
- swap quoted output in -S to italic (mostly)
 2017-01-21 19:43:07 +01:00
Dirk f2303a0d79 - poodle output polishing 
- minor polish of #552
 2017-01-21 18:08:31 +01:00
Dirk WetterandGitHub d448ebbc77 Merge pull request #552 from dcooper16/run_beast_sockets 
run_beast() speedup + sockets
 2017-01-21 18:01:55 +01:00
Dirk 2b440f15ea - polishing #570 
- run_logjam() terminates if no local DH export ciphers are configured
 2017-01-21 16:52:02 +01:00
Dirk WetterandGitHub 20cc3bc435 Merge pull request #570 from dcooper16/run_ssl_poodle_sockets 
Use sockets for run_ssl_poodle()
 2017-01-21 14:37:36 +01:00
Dirk f3666a13c5 - add crypotsense prefined DH groups 
- final FIX #589
 2017-01-20 18:14:48 +01:00
Dirk e083fab130 - run_logjam(): run_logjam(0 fixed error where logjam couldn't parse "ServerKeyExchange" message using SSL_NATIVE -- if TLS != 1.2 was returned 
- run_logjam(): determine dh bit size and based on this mark the common primes as more or less vulnerable
- run_logjam(): renamed remaining dhe variable to dh
- further house keeping in run_logjam()
 2017-01-19 14:45:19 +01:00
Dirk WetterandGitHub 9c3ab427b6 Merge pull request #590 from dcooper16/dhe_cipher_list 
Generate list of all DHE ciphers
 2017-01-18 22:08:43 +01:00
Dirk e3d183e909 -output correction run_logjam 
- rename dhe to dh
 2017-01-18 22:05:27 +01:00
Dirk 05d27ff1be - FIX for the last mess submitted ;-) 2017-01-18 18:09:39 +01:00
Dirk 61b16a078a - file etc/common-primes was not edited correctly! 2017-01-18 16:38:09 +01:00
Dirk 8bf7b6b31b forgot to save work, followup to 4433345b16 , #120, #589 2017-01-18 16:23:18 +01:00
Dirk 4433345b16 - first implementation (draft) of LOGJAM common primes, see #589, #120 
- output polishing of run_drown()
- polishing of run_logjam()
- decrease severity to high for LOGJAM, see CVE rating
 2017-01-18 15:53:01 +01:00
Dirk b1c80512e6 first bunch of common primes, see #589 + #576 + #120. License of nmap is also GPLv2: no conflicts 2017-01-18 12:44:15 +01:00
Dirk e9916dd1f4 - FIX #566 
- reorder get_<DNS>_record() for better overview
- move CMDLINE__IP away from main into determine_ip_addresses() where it belongs to
 2017-01-17 13:57:14 +01:00
Dirk e7a35934ae add lf before -E 2017-01-17 12:00:18 +01:00
Dirk WetterandGitHub 5ea5ae5a53 Merge pull request #571 from dcooper16/run_freak_sockets 
Use sockets for run_freak()
 2017-01-17 11:41:50 +01:00
Dirk a3a30c7fa5 - CAA RR (expertimental) 
- replace some sed+grep by awk in get_mx_record()
 2017-01-17 11:19:57 +01:00
Dirk cdbdc51f5d fix #587 2017-01-16 14:06:32 +01:00
Dirk WetterandGitHub 350c2e09bb Merge pull request #576 from dcooper16/extend_logjam_phase_1 
Extend logjam phase 1
 2017-01-14 21:40:29 +01:00
Dirk WetterandGitHub ad7eeddb96 Merge pull request #579 from dcooper16/run_crime_sockets 
Use sockets for run_crime()
 2017-01-14 13:18:22 +01:00
Dirk WetterandGitHub 354e0ed31a Merge pull request #585 from dcooper16/show_selected_curve 
Show selected curve
 2017-01-14 12:12:33 +01:00
Dirk WetterandGitHub 32ef531cd1 Merge pull request #586 from dcooper16/find_encrypt_then_mac_extension 
Detect support for encrypt-then-mac extension
 2017-01-14 12:02:10 +01:00
Dirk WetterandGitHub 436326a547 Merge pull request #573 from dcooper16/run_std_cipherlists_sockets 
Use sockets for run_std_cipherlists()
 2017-01-13 14:44:43 +01:00
Dirk WetterandGitHub bf87a9fe4a Merge pull request #582 from dcooper16/generate_static_cipher_lists 
Create static cipher lists for testssl.sh
 2017-01-13 14:39:17 +01:00
Dirk WetterandGitHub 048f17ca9a Merge pull request #583 from dcooper16/run_client_simulation_bugfix 
run_client_simulation() bugfix
 2017-01-13 14:38:05 +01:00
Dirk WetterandGitHub 33ca94f6e8 Merge pull request #577 from dcooper16/run_server_defaults_bugfix 
run_server_defaults() bugfix
 2017-01-08 15:59:45 +01:00
Dirk WetterandGitHub b99371c069 Merge pull request #578 from dcooper16/fix_sslv2_sockets 
sslv2_sockets() bug fixes
 2017-01-08 15:58:01 +01:00
Dirk WetterandGitHub 0b24e80057 Merge pull request #580 from gniltaws/2.9dev 
Detect $TESTSSL_INSTALL_DIR when testssl is a symlinked command
 2017-01-08 15:55:21 +01:00
Dirk WetterandGitHub e8e60e368f Merge pull request #568 from dcooper16/test_just_one_sockets 
test_just_one() sockets
 2016-12-29 22:38:35 +01:00
Dirk WetterandGitHub 5627211add Merge pull request #556 from dcooper16/run_pfs_sockets 
run_pfs() speedup + sockets
 2016-12-29 22:18:28 +01:00
Dirk c3b300c5fb - cleanup ignore_no_or_lame() 
- reorder get_install_dir in main() so that warnings are not displayed before --help
- tweak missing ~/etc msg
 2016-12-29 22:02:07 +01:00
Dirk WetterandGitHub b8e1ede08c Merge pull request #572 from dcooper16/run_logjam_sockets 
Use sockets for run_logjam()
 2016-12-29 15:38:54 +01:00
Dirk c3671928ae fix for 83d2a63 2016-12-29 00:09:44 +01:00
Dirk 83d2a63e0f - Stronger warning if ~/etc is missing, also requires more explicit consent to continue 
- fix lfs for -e -E if openssl has not DH/ECDH
- further minor output corrections
 2016-12-28 23:47:35 +01:00
Dirk WetterandGitHub 5e43739224 Merge pull request #575 from dcooper16/fix_run_protocols 
Minor bug fixes in run_protocols()
 2016-12-27 23:08:38 +01:00
Dirk WetterandGitHub 725488449c Merge pull request #574 from dcooper16/run_http2_sockets 
Use sockets for run_http2()
 2016-12-23 18:31:03 +01:00
Dirk WetterandGitHub 7a4c6294ac Merge pull request #567 from dcooper16/run_rc4_e 
Mark export ciphers in run_rc4()
 2016-12-21 12:56:26 +01:00
Dirk WetterandGitHub 298ed4e67e Merge pull request #569 from dcooper16/fix_hang 
testssl.sh hangs on local testing
 2016-12-21 12:54:27 +01:00
Dirk ea7edaf59f - unify timeout msgs on the console 2016-12-20 14:17:14 +01:00
Dirk WetterandGitHub 8e9a8faca4 Merge pull request #541 from dcooper16/run_cipher_per_proto_sockets 
run_cipher_per_proto() speedup + sockets
 2016-12-17 12:17:45 +01:00
Dirk WetterandGitHub 95615fd6c3 Merge pull request #564 from dcooper16/test_just_one_alignment 
Fix alignment problem in test_just_one()
 2016-12-17 12:11:16 +01:00
Dirk WetterandGitHub 576d0f7412 Merge pull request #563 from AlGreed/2.9dev 
Avoidance of escape characters in JSON and CSV reports
 2016-12-14 21:45:44 +01:00
Dirk WetterandGitHub 46e9cf7b8c Merge pull request #555 from dcooper16/ec_curve_strengths 
Align elliptic curve lengths with OpenSSL
 2016-12-14 20:35:38 +01:00
Dirk f30dab9e2f cosmetic improvement to #551 2016-12-13 12:38:20 +01:00
Dirk WetterandGitHub 7f3b1de737 Merge pull request #551 from dcooper16/parse_sslv2_fix 
Don't parse SSLv2 ServerHello unless successful response
 2016-12-13 12:28:26 +01:00
Dirk WetterandGitHub 156af69dc2 Merge pull request #560 from sdann/2.9dev 
Add support for testing postgres protocol over TLS/SSL
 2016-12-13 08:53:30 +01:00
Dirk d14b24e832 regression fix #290, see #549 2016-12-11 18:15:36 +01:00
Dirk WetterandGitHub 6380121acc Merge pull request #542 from dcooper16/run_rc4_sockets 
run_rc4() sockets implementation
 2016-12-10 23:49:08 +01:00
Dirk WetterandGitHub da5afd2e0a Merge pull request #553 from dcooper16/fix_read_cipher_mapping 
Fix bug in reading of cipher mapping file
 2016-12-10 13:01:07 +01:00
Dirk 72a96f64e4 Merge branch 'AlGreed-2.9dev' into 2.9dev 2016-12-03 13:40:08 +01:00
Dirk 62a40f747e Merge branch '2.9dev' of https://github.com/AlGreed/testssl.sh into AlGreed-2.9dev 
Conflicts:
	testssl.sh
 2016-12-03 13:39:50 +01:00
Dirk WetterandGitHub e67d3646e9 Merge pull request #546 from dcooper16/drown_and_non_RSA_certs 
run_drown() when server has non-RSA certificates
 2016-12-02 17:10:16 +01:00
Dirk WetterandGitHub b58c48fa3e Merge pull request #544 from dcooper16/fixmeln_typo 
Typo in definition of fixmeln()
 2016-12-01 18:18:41 +01:00
Dirk WetterandGitHub 7aee9b9f0b Merge pull request #536 from typingArtist/fix_starttls 
Implement proper STARTTLS handshake for ftp, smtp, pop, imap and nntp
 2016-12-01 16:29:12 +01:00
Dirk WetterandGitHub f90da83d0b Merge pull request #538 from dcooper16/fix_run_allciphers 
run_allciphers() bug fixes
 2016-11-30 07:55:54 +01:00
Dirk WetterandGitHub 071edc794c Merge pull request #535 from dcooper16/reorganize_run_server_defaults 
Reorganize run_server_defaults()
 2016-11-22 10:38:48 +01:00
Dirk WetterandGitHub 4f460f8dcd Merge pull request #533 from dcooper16/more_fixes_for_no_cipher_mapping 
More fixes for missing cipher mapping file
 2016-11-21 22:17:36 +01:00
Dirk WetterandGitHub 7a418ed9c8 Update CREDITS.md 2016-11-21 09:06:21 +01:00
Dirk WetterandGitHub 822c3c6cd0 Update CREDITS.md 2016-11-21 09:05:56 +01:00
Dirk WetterandGitHub 2c10c622a0 Update Readme.md 2016-11-21 08:57:50 +01:00
Dirk WetterandGitHub e60180d0ea Merge pull request #522 from dcooper16/faster_run_allciphers 
Faster version of run_allciphers()
 2016-11-20 10:41:26 +01:00
Dirk WetterandGitHub b22bde8ce0 Merge pull request #521 from dcooper16/no_pkey 
OpenSSL 0.9.8 does not support the pkey command
 2016-11-20 09:45:32 +01:00
Dirk WetterandGitHub a9f8411160 Merge pull request #523 from dcooper16/missing_mapping_file 
Additional fixes for no cipher mapping file
 2016-11-19 22:39:10 +01:00
Dirk WetterandGitHub e0f7bc4062 Merge pull request #529 from dcooper16/parse_tls_serverhello6 
Extend TLS ServerHello parsing (part 6)
 2016-11-19 22:26:56 +01:00
Dirk WetterandGitHub 0d74b798fb Merge pull request #528 from dcooper16/parse_tls_serverhello5 
Extend TLS ServerHello parsing (part 5)
 2016-11-19 22:25:26 +01:00
Dirk WetterandGitHub cb7163e186 Merge pull request #524 from dcooper16/neat_list_Camellia_GCM 
Fix neat_list() for Camellia GCM
 2016-11-19 20:18:31 +01:00
Dirk WetterandGitHub 127bc243f9 Merge pull request #526 from dcooper16/parse_tls_serverhello4 
Extend TLS ServerHello parsing (part 4)
 2016-11-17 19:30:01 +01:00
Dirk 08384920a9 Cipher mapping externalized by using David's extended mapping. Also implemented warnings 
and fallback to openssl if this file cannot be found and thus sockets can't be used
 2016-11-15 15:20:48 +01:00
Dirk e8ce1fcb74 emphasize that we're using sockets in run_allciphers -- unless otherwise requested 2016-11-15 13:09:41 +01:00
Dirk d4ed7466ce introducing --fast for the impatient 2016-11-15 12:59:07 +01:00
Dirk WetterandGitHub 37933d6fa1 Merge pull request #512 from dcooper16/run_allciphers_sockets 
Use tls_sockets() in run_allciphers()
 2016-11-15 12:54:15 +01:00
Dirk WetterandGitHub cb53723dff Merge pull request #515 from dcooper16/find_more_extensions 
Find more extensions in run_server_defaults()
 2016-11-15 10:24:00 +01:00
Dirk WetterandGitHub 1d995428e1 Merge pull request #517 from dcooper16/parse_tls_serverhello3 
Extend TLS ServerHello parsing (part 3)
 2016-11-15 08:17:48 +01:00
Dirk WetterandGitHub 83d2bb0241 Merge pull request #514 from dcooper16/fix_x25519_2.9dev 
Curve X25519 fixes for 2.9dev
 2016-11-09 21:29:29 +01:00
Dirk 36134e3040 Merge branch 'dcooper16-fix_x25519' into 2.9dev 2016-11-09 21:18:39 +01:00
Dirk fc3db43948 Merge branch 'fix_x25519' of https://github.com/dcooper16/testssl.sh into dcooper16-fix_x25519 2016-11-09 21:18:09 +01:00
Dirk 9ea5cf8698 minor 2016-11-07 23:52:58 +01:00
Dirk e9edc5fb5a update 2016-11-07 21:05:21 +01:00
Dirk 4f99d9d658 update 2016-11-07 21:03:45 +01:00
Dirk a153b71598 fixing same openssl cipher names, see #379 2016-11-06 23:00:55 +01:00
Dirk db64ea6d61 add more test info to #503 2016-11-06 22:43:42 +01:00
Dirk f5f3218e69 update 2016-11-06 21:12:57 +01:00
Dirk WetterandGitHub 21a676c2f5 Merge pull request #511 from dcooper16/client_sim_dh_bits 
Use ephemeral public key in client simulations
 2016-11-06 20:56:39 +01:00
Dirk 711e460cae minor polish 2016-11-06 20:39:56 +01:00
Dirk WetterandGitHub 18c4164902 Merge pull request #507 from dcooper16/tls_sockets_extra_extensions 
Allow caller to provide extra extensions to tls_sockets()
 2016-11-06 20:25:04 +01:00
Dirk 65c03a99ba update 2016-11-05 15:02:00 +01:00
Dirk 72ac0734d1 tolower 2016-11-05 14:55:30 +01:00
Dirk dc871030b2 reordered help 2016-11-05 13:43:55 +01:00
Dirk d521dda570 Merge branch '2.9dev' of github.com:drwetter/testssl.sh into 2.9dev 2016-11-05 12:52:24 +01:00
Dirk WetterandGitHub 41e862b3ea Update Readme.md 2016-11-05 12:41:05 +01:00