Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
520 Commits 16 Branches 39 Tags
489baa12994412593d9f12be25552cc6d7eb84de
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk 489baa1299 unitize programming styles: ${var} --> $var, double square brackets instead of single 2015-09-03 12:14:47 +02:00
Dirk Wetter 73b61469bf Merge pull request #186 from anoma/anoma-typo-patch-1 
Typo. Inconsistent CVE string format
 2015-09-03 10:25:03 +02:00
Dirk Wetter 90930a2f78 - changed return code if someone dares to use dash as it hiccups 
- catch users try to use sh instead of real bash (#184),  see http://www.gnu.org/software/bash/manual/bashref.html#Bash-POSIX-Mode)
 2015-09-02 12:56:03 +02:00
Dirk Wetter 00131e2a66 Merge pull request #180 from jpluimers/master 
Fixes #164 Mac OS X Darwin binaries with zlib support
 2015-08-30 12:41:46 +02:00
Dirk Wetter 45eb3ed662 better phrasing for LOGJAM, see #181 2015-08-28 17:43:38 +02:00
Dirk Wetter 90ead7a301 FIX #183 2015-08-28 17:06:07 +02:00
Dirk Wetter aa175f2c56 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-08-28 16:46:49 +02:00
Dirk Wetter 412fb6fb05 FIX #182 2015-08-28 16:46:28 +02:00
Dirk Wetter 8d0dccc31a Update Readme.md 2015-08-28 15:09:53 +02:00
Dirk Wetter 9b718d39d0 - removed VERBERR (is now DEBUG=2) 
- hex2dec uses now internal echo instead of printf (which has problems with some chars if unexpected content if not properly used)
 2015-08-28 14:59:04 +02:00
Dirk b5818f6034 - FIX $177 
- some by-catches whle shellchecking
- minor cleanups
 2015-08-28 00:15:51 +02:00
Dirk c102bb6712 micro fix for the ESC code orgination fron tput test 2015-08-27 20:39:20 +02:00
Dirk 0d9370237c - FIX #172 
- labeled TLS_FALLBACK_SCSV as experimental, to be improved in next release (remarks in code)
- removed experimental from FREAK check
- separated headerfile from errorfile, TLS handshake oids were sometimes misinterpreted as IPv4 addreses in header
- bumped up rc version
- linefeeds
 2015-08-27 11:25:12 +02:00
Dirk Wetter c93dc01b41 better service detection, dedicated line for NNTP and certificate stuff redirected to ERRFILE 2015-08-26 20:06:53 +02:00
Dirk Wetter 838112e6d2 - LibreSSL compatibility: recent pull spits out an error if cnf file isn't found (oh well) ==> introduction of #ERRFILE, good idea anyway 
- commented what I wanted to achieve with the colors
- code cleanups
 2015-08-24 23:50:03 +02:00
Dirk aa91990fb3 - fix bug where a host name like AAA.BBB.CCC.DDD.in-addr.arpa.DOMAIN.TLS was taken as an ipv4 address 
- freebsd 9 supports now also colors with setaf, Darwin?
- correct indentation of help
- improved parsing in command line so that where a distinct option is required it is also tested in the 1st place
- removed -q in help (deprecated as we might want to use it for other things in the future)
- fix: if $PWD/openssl was a dir it bailed out
- cleanup of fatal errors ==> provide ONE function
 2015-08-24 22:17:35 +02:00
Dirk 83bf9067aa FIX #167 (# of certificates provided) 2015-08-23 21:16:34 +02:00
Dirk Wetter 6baf5e377c - sanitize '%' in general output function, avoids hiccups in url encoded strings 
- FIX #178 (Security headers only key in green, not value)
- CSP rule for facebook hast 127.0.0.1 which is labeled as IP address
 2015-08-21 18:10:45 +02:00
Dirk Wetter 87cef93b6c - more solid parsing for HPKP header (FIX #163) 
- X-UA-Compatible is now an "other" flag and key won't be swallowed
 2015-08-21 12:43:10 +02:00
Dirk Wetter 394bde8ff5 output FIX for multiple CRLs (#165) 2015-08-21 10:47:29 +02:00
Dirk Wetter 4862ece267 Merge pull request #175 from PeterMosmans/typo-fix 
Fixes #174
 2015-08-18 21:30:50 +02:00
Dirk Wetter 85268360c0 Update CREDITS.md 2015-08-18 10:15:15 +02:00
Dirk Wetter ab1de25238 Merge pull request #173 from jonorossi/darwin-san-fix 
Fix subject alternative name on darwin
 2015-08-18 10:13:28 +02:00
Dirk 9afab04012 FIX #162 (leading space for rp banner and missing lf) 2015-08-17 20:13:52 +02:00
Dirk 405b0f10bf FIX #161 + small improvemnet on rengotiation 2015-08-15 21:33:17 +02:00
Dirk e3fcd786f7 - FIX #160 -- removed code from #27 
- bumped up version to 2.6rc2
 2015-08-15 18:48:49 +02:00
Dirk Wetter 8bc2909899 updated from git log for upcoming release 2015-08-14 13:34:45 +02:00
Dirk Wetter 58a1c1c1da - expiration variables tunable via ENV 
- cleanups expire section
 2015-08-13 16:56:12 +02:00
Dirk Wetter 2c12e7d20e Merge pull request #159 from tkaehn/fix-expiration-check 
Fix certificate expiration check
 2015-08-13 10:35:19 +02:00
Dirk Wetter 00c7fc2ccb Update CREDITS.md 2015-08-12 14:54:22 +02:00
Dirk Wetter 719536a44e FIX: Dilyans bug where a STARTTLS servive runs on a different port 2015-08-12 13:58:45 +02:00
Dirk 5bc6e5fda9 - if a record is local host it is shown now 
- also look in etc hosts for MSYS2
- cosmetic improvements
 2015-08-12 00:17:28 +02:00
Dirk Wetter 81b158431f NEW: showing # of detected pinned keys (HPKP) 2015-08-10 15:58:56 +02:00
Dirk Wetter 72aa8add5c FIX for missing CN (e.g. cloudflare) 2015-08-10 15:17:42 +02:00
Dirk Wetter e6f0f79157 - FIX: rDNS ignores CNAME now 
- some code beautified
 2015-08-10 14:47:11 +02:00
Dirk aa2b33fdb4 rp header fine tuning 2015-08-08 13:42:31 +02:00
Dirk dc60d9360a reverse proxy banner alignment 2015-08-08 13:37:05 +02:00
Dirk 56e6f90308 FIX #158 (pagesspeed header was identified as IPv4 addr) 2015-08-08 10:20:13 +02:00
Dirk Wetter 70ff293fb7 - fix for #156 
- reverting #27. Catch is the functions are being initiated at a fixed time instead of while calling. This conflicts with the --color option which is done late. Other solution?
 2015-08-05 11:31:55 +02:00
Dirk Wetter be7e03cfdf Update Readme.md 2015-08-04 13:44:54 +02:00
Dirk Wetter ab37fad6e6 Update CREDITS.md 2015-08-04 10:33:48 +02:00
Dirk Wetter 648439b6c3 Merge pull request #155 from jpluimers/master 
OS X builds with as many ciphers as possible without generating errors. Should fix #127
 2015-08-03 19:17:47 +02:00
Dirk Wetter 6a982927ac mass testing option 2015-08-02 01:36:50 +02:00
Dirk f1fe2c3286 just renaming as rc1 for 2.6 2015-08-02 01:25:39 +02:00
Dirk fcb8c5d0bc - FIX for multiple ip addresses for one mx host (didn't expect a matroshka ;-)) 
- make dotted lines smaller
 2015-08-02 01:16:27 +02:00
Dirk ea1ab3b911 help for mass testing option in #153 2015-08-02 00:26:34 +02:00
Dirk 7ac08dc26a Color function maker 2015-08-02 00:07:08 +02:00
Dirk 325abcfc06 - first shot for szepeviktor's color function maker #27 2015-08-02 00:03:30 +02:00
Dirk 9006234c34 - NEW: mass testing via --file 
- FIX: ipv6 address in rDNS was ..umm err ....missing some chars
- rough ipv6 address detection (fixes single colon in "further ip addresses")
- FIX: facebook has EC certificate but signing algo is not EC
- FIX for wrong openssl location in banner
 2015-08-01 23:11:27 +02:00
Dirk Wetter 79f4e4237f Update old.CHANGELOG.txt 2015-07-30 09:29:42 +02:00
Dirk Wetter 2a6ef81f71 Update old.CHANGELOG.txt 2015-07-30 09:28:25 +02:00
Dirk Wetter 9347ecb8f1 Update and rename CHANGELOG.txt to old.CHANGELOG.txt 2015-07-30 09:22:41 +02:00
Dirk Wetter 535148267b Merge pull request #151 from PeterMosmans/awk-output 
Another fix for #140
 2015-07-27 12:51:17 +02:00
Dirk Wetter c05de1801f Merge pull request #150 from PeterMosmans/textual 
Minor textual fix
 2015-07-27 11:32:14 +02:00
Dirk f45f91a07e - quiet mode for mass testing (see #148) w/o banner 
- -q is now --devel
 2015-07-25 14:33:08 +02:00
Dirk d4f7dd0f91 * squash dirname err msg on FreeBSD 
* numerous DNS related internal improvements
* FIX #137
* FIX #147
 2015-07-23 17:11:33 +02:00
Dirk 8c044587c5 - FreeBSD 64 bit binary (static, compiled under FreeBSD 9.3) 2015-07-23 16:34:45 +02:00
Dirk f337f28ce8 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-07-22 13:11:59 +02:00
Dirk 013a24caea * - improved DNS parser again, see #141 #140 
* at least exit with -250 or worse if a problem occurs (rest still undefined, needs to be fixed, see #145/#100)
* renamed all top level tests in "run_" for better code
 2015-07-22 13:11:20 +02:00
Dirk Wetter 3268113a84 Update Readme.md 2015-07-21 21:52:24 +02:00
Dirk Wetter a8364b67cb Update Readme.md 2015-07-21 21:51:10 +02:00
Dirk c66a2c8f2e FIX #144: reverse screw up of hpkp function for BSD/Darwin 2015-07-21 20:35:49 +02:00
Dirk 784294b52d awk fixes for MSYS2 FIX #141, #FIX 140 2015-07-21 14:20:15 +02:00
Dirk Wetter a2b6a740a4 Update Readme.md 2015-07-21 10:34:08 +02:00
Dirk Wetter 3f804a75c1 Update CREDITS.md 2015-07-21 10:32:31 +02:00
Dirk Wetter 069f5592ac Merge pull request #143 from f-s/master 
Arm compile added
 2015-07-21 10:27:43 +02:00
Dirk Wetter 9b92a04261 Update CREDITS.md 2015-07-21 10:25:46 +02:00
Dirk Wetter 5af2d72323 Update CREDITS.md 2015-07-21 10:25:17 +02:00
Dirk Wetter 3d5d1e18ed Merge pull request #142 from jonorossi/bash3-support-on-osx 
Fix syntax error near unexpected token on Mac OS X
 2015-07-21 10:01:30 +02:00
Dirk Wetter 1954f9eaa8 - new naming scheme of copied binaries 
- two GOST ciphers included
- error handling improved
 2015-07-20 21:46:04 +02:00
Dirk Wetter 8c858dbe3c yet another GOST fine tuning thing 2015-07-20 20:49:31 +02:00
Dirk Wetter d6b96a3e65 GOST, minor tuning 2015-07-20 19:34:42 +02:00
Dirk Wetter 32a29ff615 addiotnal citation for GOST 2015-07-20 19:06:53 +02:00
Dirk Wetter e5d8d8f115 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-07-20 16:57:40 +02:00
Dirk Wetter ddcef43be5 * 2 GOST cipher added 
* layout hover, alternate lines
 2015-07-20 16:57:08 +02:00
Dirk Wetter 66e479c056 GOST additions 2015-07-20 15:28:55 +02:00
Dirk Wetter f81b3a5c25 * GOST ciphers sometimes missing during scan 
* help was not precise wrt some arg w no params
 2015-07-20 14:05:35 +02:00
Dirk Wetter 0215de3c89 ssl3 and trace enabled 2015-07-20 12:48:24 +02:00
Dirk Wetter 66f0b22adb word match for -V / -x now only for non-numbers: testssh.sh -x cc google.com tests for chaha ciphers 
(before only word matching was done e.g.: testssl.sh -x ECDH chase.com
 2015-07-17 15:58:07 +02:00
Dirk Wetter 473c9c1e3a Merge branch 'master' of github.com:drwetter/testssl.sh 2015-07-17 14:58:37 +02:00
Dirk Wetter d9b9d2c2fb * path display error in banner fixed 2015-07-17 14:58:12 +02:00
Dirk Wetter cda5eff12e * STARTTLS_SLEEP 
* resolved misleading output STARTTLS + socket
* fixed poodle ciphers in code (but not used yet)
 2015-07-17 14:33:23 +02:00
Dirk Wetter adba3fab4d typo 2015-07-17 13:29:17 +02:00
Dirk Wetter f04ee57e79 * display shortend path to $OPENSSL in banner 2015-07-17 13:25:39 +02:00
Dirk Wetter a9685fe205 Update Readme.md 2015-07-17 12:10:42 +02:00
Dirk Wetter f63ebc2109 Merge pull request #136 from oliof/patch-2 
Update Readme.md
 2015-07-17 11:40:20 +02:00
Dirk Wetter c9e9ef9433 Merge pull request #135 from oliof/patch-1 
typo
 2015-07-17 11:39:43 +02:00
Dirk Wetter 594996883f Merge branch 'master' of github.com:drwetter/testssl.sh 2015-07-17 11:04:21 +02:00
Dirk Wetter bb5dd5224e 2015-07-17 11:04:01 +02:00
Dirk Wetter 0b4ab796df - license update 2015-07-17 11:01:33 +02:00
Dirk Wetter c343b9105a Update Readme.md 2015-07-17 10:55:15 +02:00
Dirk Wetter b16033c666 Update Readme.md 2015-07-17 10:51:28 +02:00
Dirk Wetter dc23c9fbbb Update Readme.md 2015-07-17 10:50:50 +02:00
Dirk Wetter 6cb8c6b506 - Darwin binary 2015-07-17 10:48:26 +02:00
Dirk Wetter b941443049 - the vanilla binaries are needless 2015-07-16 23:05:44 +02:00
Dirk Wetter 54290b220a - Provide Darwin binaries and paths thereto 
- provide also other static bins in $PWD/bin
 2015-07-16 23:01:10 +02:00
Dirk Wetter b157a26632 * EV certificate detection 
* SSLv2 + STARTTLS protocol check always uses sockets now
* STARTTLS protocol now returns over sockets the TLS time (if available)
* few LibreSSL output oddities fixes
* output corrections for STARTTLS
* additional path for binaries (we change the path soon but leave both in the code for now)
 2015-07-16 17:58:03 +02:00
Dirk Wetter f44954ae0e - clarify licenses for openssl 2015-07-16 17:49:17 +02:00
Dirk 4c033bc0cc * header flags added 2015-07-14 20:44:04 +02:00
Dirk 2e40c2bde6 * misleading warning for DH bits for Negotiated cipher omitted if no DH or EC and OPENSSL <= 1.0.1 2015-07-14 19:58:04 +02:00