Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
852 Commits 14 Branches 30 Tags 204 MiB
Commit Graph

852 Commits

Author SHA1 Message Date
Dirk 483139f0a4 - show censy link by default 2016-03-05 21:35:30 +01:00
Dirk Wetter 28a6199109 - several code housekeepings 
* SHOW_EACH_C has now the correct logic
  * pr_litemagenta ==> pr_warning
  * fileout WARN according to pr_warning then changed appropiately
  * some global vars in "" to avoid unneccessary shell expansion
  * HAS_SSL2/HAS_SSL3 now works more reliably
  * warning added in cipher order if ssl2/ssl3 is not supported by openssl
 2016-03-05 21:07:49 +01:00
Dirk Wetter 118f897d6d Merge pull request #308 from skunkwerks/master 
fix certificate_info() test
 2016-03-04 00:33:25 +01:00
Dave Cottlehuber 9e77f38318 fix certificate_info() test 2016-03-03 21:47:36 +01:00
Dirk Wetter 1ead2e65bc - experimental label for DROWN 2016-03-03 20:04:20 +01:00
Dirk Wetter 6367693ccf - first check for DROWN #305 2016-03-03 19:50:44 +01:00
Dirk Wetter 752e6cdf56 - one outstanding openssl CVE issue wrt SSLv2 
- first skeleton for DROWN #305
 2016-03-03 11:56:25 +01:00
Dirk Wetter c4a68df423 Merge pull request #306 from thecky/severity 
Rename pr_() from color to severity naming
 2016-03-02 16:49:46 +01:00
Thomas Martens 38477b4383 renamed pr_brown to pr_svrty_medium 2016-03-01 20:42:34 +01:00
Thomas Martens dbfa66e6c7 renamed pr_yellow to pr_svrty_minor 2016-03-01 20:41:03 +01:00
Thomas Martens ff9f1632e4 renamed pr_green to pr_done_best 2016-03-01 20:39:30 +01:00
Thomas Martens 2686f8cdb4 renamed pr_litegreen to pr_done_good 2016-03-01 20:36:41 +01:00
Thomas Martens 207e4e5ce4 renamed pr_red to pr_svrty_critical 2016-03-01 20:31:26 +01:00
Thomas Martens cad924e707 renamed pr_litered to pr_svrty_high 2016-03-01 20:25:41 +01:00
Thomas Martens 490da0069a Merge branch 'master' of https://github.com/drwetter/testssl.sh into severity 2016-03-01 20:08:26 +01:00
Dirk Wetter 61ecf051e4 Merge pull request #300 from Dude4Linux/uppercase-severity-codes 
Consistent case severity codes
 2016-02-24 08:35:24 +01:00
Thomas Martens f90f1a91e4 Merge branch 'master' of https://github.com/drwetter/testssl.sh into severity 2016-02-23 21:04:16 +01:00
John Carver 87218b6b1a Merge branch 'master' into uppercase-severity-codes 2016-02-23 10:34:32 -06:00
Dirk Wetter 53e76b0545 Update Readme.md 2016-02-23 09:08:11 +01:00
Dirk 20cee1e788 - fix: relative redirect led to fp (https) 2016-02-22 10:44:43 +01:00
Dirk c70a13d014 - fix #296 (no recent regression as assumed) 2016-02-20 21:46:17 +01:00
Dirk 583584e095 - FIX #297 
- FIX #243
- reformmated BEAST a bit (was screwed up in ! WIDE mode if too many ciphers
 2016-02-20 14:10:04 +01:00
Dirk 71b4c03202 - fix key problem hpkp 2016-02-20 11:07:47 +01:00
John Carver 4be1539a4d lowercase ok when used with NOT in (NOT ok) 2016-02-18 11:49:47 -06:00
John Carver 291edce0c3 uppercase server sets a cipher order (OK) 2016-02-18 11:41:17 -06:00
John Carver 6858026412 uppercase INFO when outputting status_code 2016-02-18 11:15:31 -06:00
Dirk Wetter 7846fc5fef Merge pull request #294 from b1gb1t/jsonCorrection 
Correction of line 3607: new line (\n) corrupted the json format
 2016-02-16 12:32:05 +01:00
b1gb1t 2ee021d337 Correction of line 3607: new line (\n) corrupted the json format 2016-02-16 09:54:01 +01:00
Thomas Martens baff869850 Merge branch 'master' of https://github.com/drwetter/testssl.sh into severity 2016-02-14 12:10:07 +01:00
Dirk Wetter 61c1669687 Merge pull request #292 from dcooper16/multiple_certificates 
Detect multiple certificates cleanup
 2016-02-14 00:08:52 +01:00
Dirk Wetter 79445ebe5b Merge pull request #293 from SietsevanderMolen/fix-json 
fix json output
 2016-02-12 15:11:45 +01:00
Sietse van der Molen 394f186000 also remove carriage returns, fix for csv 2016-02-12 12:40:31 +01:00
Sietse van der Molen b2e4df60ca fix json output 
use double quotes instead of single quotes
delete newlines from strings
 2016-02-12 11:05:36 +01:00
David Cooper 02239be295 Detect multiple certificates cleanup 
This corrects the indentation within determine_trust() when there are multiple certificates and the output for "Chain of trust (experim.)" takes up more than one lines.

In addition, it fixes the ID field of the JSON output for entries related to the certificate. At the moment, each ID string begins with a blank space. This changes it to remove the space if there is one certificate and to add "Server Certificate #X" at the beginning of each ID if there is more than one certificate.

Perhaps there's a better way than just using, for example, "Server Certificate #1 key_size" as a way to distinguish multiple "key_size" entries in the JSON file. This is just one idea, and it can certainly be changed if those who intend to use the JSON output prefer something else.
 2016-02-09 13:35:46 -05:00
Dirk Wetter 70cd658447 - FIX #283 (regression from 1a8ed3d70a) 
- minor output fixes for BEAST
- >4096 bit RSA keys labled in litemangenta now as it could have compatibility probs
- -V 0x.. or -V 0X.. gives at least a warning
 2016-02-07 19:13:59 +01:00
Dirk Wetter b8f2540541 Merge pull request #286 from tjconcept/master 
fix typo in b93fc824
 2016-02-07 08:49:20 +01:00
Thomas Jensen c48b27a9a9 fix typo in b93fc824 2016-02-07 03:07:30 +01:00
Dirk b93fc82489 slightly better output for OCSP stapling 2016-02-06 22:31:32 +01:00
Dirk Wetter c60a39282c typo 2016-02-06 16:18:46 +01:00
Dirk Wetter 0f4eb221fb additions, naming of sources 2016-02-06 16:17:01 +01:00
Dirk Wetter 1fe9c95dc0 checkin (for future work) 2016-02-06 15:42:55 +01:00
Dirk Wetter 5491333693 Merge pull request #285 from dcooper16/mapping-rfc 
Fix typo in etc/mapping-rfc.txt
 2016-02-06 10:30:54 +01:00
David Cooper 77379903ed Fix typo in etc/mapping-rfc.txt 
Change value for SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA from xFEFE to xFEFF in accordance with http://www-archive.mozilla.org/projects/security/pki/nss/ssl/fips-ssl-ciphersuites.html.
 2016-02-05 14:53:19 -05:00
Dirk 39226e05d2 openssl 1.1.0 2016-02-03 17:56:56 +01:00
Dirk a676742256 Remaining issues solved for OpenSSL 1.1.0 compliance, output corrections, CN/SNI improvements 2016-02-03 17:55:53 +01:00
Dirk 9cf3e21c3d - swapped sig_algo and server key size 
- output improvements for unknown sig algos like GOST
 2016-02-03 09:55:47 +01:00
Dirk ea18d2f02c - fix: discovering the CN for the default host (without SNI) 
- CN parsing of certificate improved
- CN / subject can be also cyrillic now -- supposed the terminal supports the charset
 2016-02-03 00:05:57 +01:00
Dirk Wetter 40d4cbb57f Update Readme.md 2016-02-01 22:42:49 +01:00
Dirk Wetter aff08b1ff2 Update CREDITS.md 2016-02-01 22:41:36 +01:00
Dirk dd65050ee1 - "secret" env switch shows during -e/-E the signature algorithm (see also #276) 
- exp. date check corrected esp. for openssl 1.1.0
- warning relaxed for chain of trust
 2016-02-01 22:06:27 +01:00