Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 05:38:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,652 Commits 17 Branches 39 Tags
52374e552eb839a49e456048121dfc8b05ab7634
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk 52374e552e handle spell errors 2024-09-03 15:27:42 +02:00
Dirk 44a60ff80b Improve banner (3.0) 
... for readablity and bugs to be filed (see #2506)

This PR defines a short string for the OpenSSL banner as some suppliers have
makde them (unnecessarily) long so that it won't fit in the banner.

The banner also now omits the built line nad bash version when scanning
as for the user it is normally not important.
 2024-09-03 15:17:23 +02:00
Dirk WetterandGitHub 6d714d6b99 Merge pull request #2546 from drwetter/fix_2542_3.0 
fix typo
 2024-08-26 10:44:30 +02:00
Dirk Wetter 69d3cff51c fix typo 2024-08-26 10:42:34 +02:00
Dirk WetterandGitHub 7db944e584 Merge pull request #2536 from drwetter/update_CAstores-3.0 
Update Truststores (3.0)
 2024-07-24 09:28:39 +02:00
Dirk 887f21609a Update Truststores (3.0) 
Same as #2528, only for the 3.0 branch.

- Mozilla: 2024-7-02
- Debian 12, ca-certificates from 20230311
- JDK 21.04
- Apple via https://github.com/apple-oss-distributions/security_certificates (according to git log latest change Fri Dec 15 00:44:35 2023)
- Microsoft via CertUtil (date of this PR)

Modified Readme to reflect that the Apple CA certificates are better to retrieve from GH and clarified minor things.

This also fixes #2525 (for 3.0), where >=2 certificates were missing.
 2024-07-23 12:20:09 +02:00
Dirk WetterandGitHub 08a430e01a Merge pull request #2531 from drwetter/fix_ipv6_ula_and_more-3.0 
Fix IPv6 addresses (3.0)
 2024-07-22 23:31:55 +02:00
Dirk 33993d4174 Fix IPv6 addresses (3.0) 
Local and ULA and other IPv6 adresses were incorrectly filtered by ``awk '/^[0-9]/ { print $1 }'`` which searches in the first term for numeric values only.

This PR adds a-f and fixes #2529 for the 3.0 branch.
 2024-07-22 21:17:16 +02:00
Dirk WetterandGitHub 4f9bfbc47c Merge pull request #2508 from drwetter/make_rel3.0 
Prepare for release 3.0
 2024-06-13 18:32:28 +02:00
Dirk 3cb2371744 Make ready for release 
* bump version
* modify banner and issue template to address #2506

Needed to modify the banner a bit for space reasons. Looks catchier
though.
 2024-06-13 17:28:46 +02:00
Dirk WetterandGitHub 05fb5f97bf Merge pull request #2507 from drwetter/codespell_2502 
Fix spelling issues in #2503
 2024-06-13 15:39:17 +02:00
Dirk 54d1784203 add file, previously forgotten 2024-06-13 15:21:13 +02:00
Dirk 3beeedcaf0 Fix spelling issues in #2502 2024-06-13 15:19:10 +02:00
Dirk WetterandGitHub 9c2bfff1bf Merge pull request #2505 from dcooper16/fix2502_30 
Fix #2502 in 3.0 branch
 2024-06-13 15:12:57 +02:00
Dirk WetterandGitHub 212bdbb78e Merge pull request #2485 from drwetter/fix_CAARRquery_noDNS_30 
Fix CAA query when nodns set
 2024-05-26 17:40:10 +02:00
Dirk 83059ca5ee Fixes DNS CAA query when no query option set 2024-03-30 17:33:55 +01:00
Dirk WetterandGitHub 30c0359bdd Merge pull request #2471 from Tazmaniac/mongodb-detection-fix-backport 
MongoDB identification fix
 2024-02-13 18:42:33 +01:00
Dirk WetterandGitHub 208efdc68a Merge pull request #2452 from drwetter/update_hashes_3.0 
Update hashes for HPKP
 2023-12-24 15:33:28 +01:00
Dirk 0de86283e9 Update hashes for HPKP 2023-12-24 13:57:48 +01:00
Dirk WetterandGitHub 0de609da8c Merge pull request #2451 from drwetter/fix_stupid_umaskerror_3.0 
Bail out if user error bc of umask (3.0 branch)
 2023-12-24 11:12:29 +01:00
Dirk Wetter 02220d2fc4 Bail out if user error bc of umask (3.0 branch) 
Implemnation for 3.0, 3.2 see #2450

If a user chose a broken umask testssl.sh will start but emits subsequent errors.
This patch adds two sanity checks whether it is allowed to create and read files in the temp directory.

Fixes #2449
 2023-12-24 10:21:11 +01:00
Dirk WetterandGitHub 68dec54cc5 Merge pull request #2435 from drwetter/fix_2431_grepProb 
Amend fix for newer grep versions
 2023-10-30 20:29:59 +01:00
Dirk a0c0c73b66 Amend fix for newer grep versions 
See also PR #2243, issue #2241

Removes unneeded escape for exclamation mark. This is for 3.0.
3.2 has the fix already.
 2023-10-30 19:07:06 +01:00
Dirk WetterandGitHub 40c6be790b Merge pull request #2434 from drwetter/fix_2429_3.0 
Fix weird bash globbing (3.0)
 2023-10-30 17:53:19 +01:00
Dirk 41c697f232 put the redirection in the right spot 2023-10-30 15:25:38 +01:00
Dirk 775ed60437 Fix weird bash globbing (3.0) 
What was problematic was the error message when the certificate stores were missing. This fixes it by redirecting the error message to /dev/null so that if the sub function detects the missing file it returns with an error by the program and not by executing "basename"

As for 3.2 this is for the 3.0 branch.
 2023-10-30 15:20:37 +01:00
Dirk WetterandGitHub 7df05511da Merge pull request #2426 from drwetter/drwetter-patch-2 
Sync GHCR with Dockerfile
 2023-10-30 14:41:12 +01:00
Dirk WetterandGitHub 382c1530cb Sync GHCR with Dockerfile 2023-10-13 17:38:09 +02:00
Dirk WetterandGitHub 3eb3994d39 Merge pull request #2421 from drwetter/alpine_3.18 
Update Dockerfile to Alpine 3.18
 2023-10-13 10:43:56 +02:00
Dirk WetterandGitHub cd6659c7ad Update Dockerfile to Alpine 3.18 
for an extension of life time:

https://endoflife.date/alpine
 2023-10-12 09:59:25 +02:00
Dirk WetterandGitHub ece9447ac4 Merge pull request #2412 from drwetter/fix_extended_regexp3.0 
Fix regexp in STARTTLS detection
 2023-10-07 17:21:25 +02:00
Dirk c09e1587b7 fix spell errors 2023-10-07 15:15:04 +02:00
Dirk c31b9492ce Fix regexp in STARTTLS detection 
see also #2411, kudo to Geert!
 2023-10-07 15:06:36 +02:00
Dirk WetterandGitHub e9cd8c3afd Merge pull request #2391 from Tazmaniac/Renego-backport-patch 
Backport pull request #2360 to fix #2389
 2023-09-08 19:20:38 +02:00
Dirk WetterandGitHub 5cb30aa510 Merge pull request #2342 from drwetter/openssl_link_docker_3.0 
make openssl 1.1 available via /usr/bin/openssl
 2023-03-20 14:29:14 +01:00
Dirk f65b81837c make openssl 1.1 available via /usr/bin/openssl 2023-03-20 14:19:35 +01:00
Dirk WetterandGitHub 4c54464ab8 Merge pull request #2341 from drwetter/fix_nss_dns_3.0 
Modify Dockerfile.git also, amending #2340
 2023-03-20 13:42:59 +01:00
Dirk Wetter bf88b8b443 Modify Dockerfile.git also, amending #2340 2023-03-19 22:57:58 +01:00
Dirk WetterandGitHub 6454f656db Merge pull request #2340 from drwetter/fix_nss_dns_3.0 
Add openssl, offer to query OCSP responder (3.0)
 2023-03-19 22:52:33 +01:00
Dirk Wetter 8759ac61af Add openssl, offer to query OCSP responder 
This PR includes two tweaks:

* it helps avoiding the bug querying OCSP responder #2329 by adding
  openssl. The openssl supplied has a mimor DNS lookup problem due
  to glibc / musl libc compatibilty issues
* by adding openssl also it helps a bit for some performance problems
  related to other projects, see #2314

Also the git binary is removed (#2315).

Thanks to @polarathene for the discussions
 2023-03-19 22:41:17 +01:00
Dirk WetterandGitHub 30022ea697 Merge pull request #2339 from drwetter/CAstores_update_3.0 
Update CA root stores
 2023-03-19 22:27:36 +01:00
Dirk Wetter ad44f7d53e Update CA root stores 2023-03-18 22:57:52 +01:00
Dirk WetterandGitHub e9c0beb3f7 Merge pull request #2335 from drwetter/sanitize_fileout_3.0 
Backport: Make sure control chars from HTTP header don't end up in …
 2023-03-12 18:19:09 +01:00
Dirk Wetter 828af39053 Backporting Make sure control chars from HTTP header don't end up in html,csv,json 
This is for 3.0. For 3.1dev, see #2332 .

This PR addresses the bug #2330 by implementing a function which removes control characters from the file output format html,csv,json in the output.
In every instance called there's a check before whether the string contains control chars, hoping it'll save a few milli seconds.

A tr function is used, omitting LF.
It doesn't filter the terminal output and the log file output, yet. It provides a function though which is not being called.
 2023-03-12 17:40:02 +01:00
Dirk WetterandGitHub 34453664a1 Merge pull request #2334 from drwetter/drwetter-patch-5 
Update .gitignore
 2023-03-12 16:13:21 +01:00
Dirk Wetter d662b7bfec add .git dir 
see https://github.com/codespell-project/actions-codespell/issues/56
 2023-03-12 16:10:56 +01:00
Dirk Wetter 16450e3d4f add codespell corrections (aNULL) 2023-03-12 16:06:02 +01:00
Dirk WetterandGitHub d6c0b33736 Update .gitignore 
sync with 3.1dev
 2023-03-12 15:59:47 +01:00
Dirk WetterandGitHub b8bb3ef747 Merge pull request #2327 from drwetter/fix_mime-type-3.0 
Fix Accept Header (3.0)
 2023-02-20 20:29:46 +01:00
Dirk 96a4eb99ad Fix Accept Header (3.0) 
see #2325. This is for the 3.0 branch (for 3.1dev see #2326)

"whenever HTTP/1.1 is used then the Accept header uses "text/*" as a MIME type.
This causes some minor issues with some of the checks we are doing"
 2023-02-20 15:14:34 +01:00
Dirk WetterandGitHub bd310489d1 Merge pull request #2322 from dcooper16/30_no_grade 
Remove set_grade_cap() from 3.0
 2023-02-07 08:59:09 +01:00
Dirk WetterandGitHub 3bacce4770 Merge pull request #2319 from SSLbrain/3.0 
Feature request Trustcor certificate #2293 for 3.0
 2023-02-05 19:21:15 +01:00
Dirk WetterandGitHub 4a2b258425 Merge pull request #2318 from dcooper16/fix_html_30 
Fix HTML output in Bash 5.2 and newer
 2023-02-04 09:24:07 +01:00
Dirk WetterandGitHub cd2eef30ea Merge pull request #2307 from drwetter/upgrade_alpine_perf-fix-3.0 
Upgrade Alpine version for both Dockerfiles (3.0)
 2023-02-01 19:49:12 +01:00
Dirk Wetter cd66c90054 Upgrade Alpine version for both Dockerfiles (3.0) 
... to improve/mitigate performance problems, see #2299. (musl libc vs. glibc)

Same PR as for 3.1dev branch: #2306
 2023-02-01 19:47:38 +01:00
Dirk WetterandGitHub d01ded1fd0 Merge pull request #2283 from drwetter/drwetter-patch-3 
Reflect past update for Dockerfile (3.0) for ghcr
 2022-11-28 17:09:37 +01:00
Dirk WetterandGitHub 801930736f Reflect past update for Dockerfile (3.0) for ghcr 
... using alpine 3.15
 2022-11-28 14:13:56 +01:00
Dirk WetterandGitHub 6b91a60a7a Merge pull request #2274 from dcooper16/fix2249 
Fix #2249
 2022-11-11 16:30:12 +01:00
Dirk WetterandGitHub 3261e6e7a9 Merge pull request #2273 from dcooper16/fix2271_30 
Fix #2271
 2022-11-11 16:28:48 +01:00
Dirk WetterandGitHub 52fe210e76 Merge pull request #2269 from drwetter/mastodon-3.0 
Hint for mastodon
 2022-11-10 16:33:10 +01:00
Dirk WetterandGitHub 1172327509 Hint for mastodon 
... ... and to a separate account
 2022-11-10 15:14:21 +01:00
Dirk WetterandGitHub 87bae00fa5 Merge pull request #2267 from drwetter/workflow_update_3.0 
Restrict permissions, update actions
 2022-11-10 10:55:39 +01:00
Dirk WetterandGitHub 9eeb93625d Merge pull request #2263 from dcooper16/run_pfs_infinite_loop 
Fix infinite loop in run_pfs()
 2022-11-10 10:49:33 +01:00
Dirk Wetter b8afca6be1 Restrict permissions, update actions 
The actions release numbers were taken from the 3.1dev branch.

    Note: there was one strange codespell error in PR #2263.
    Maybe the updated action will avoid this in the future.
 2022-11-10 10:35:43 +01:00
Dirk WetterandGitHub abdd51d815 Merge pull request #2231 from drwetter/bump_version 
Bump version
 2022-09-28 09:19:37 +02:00
Dirk WetterandGitHub 3ad9c6edd0 Merge pull request #2243 from ghen2/grep-3.8 
Fix grep 3.8 warnings on unneeded escapes of hyphen, slash, space.
 2022-09-18 19:21:06 +02:00
Dirk WetterandGitHub 6e68763885 Merge pull request #2240 from dcooper16/neat_lis_alignment_30 
Fix alignment in neat_list()
 2022-09-16 09:15:17 +02:00
Dirk 884319948e Bump version 2022-09-07 10:49:19 +02:00
Dirk WetterandGitHub 8eb177aa45 Merge pull request #2230 from drwetter/new_binaries_3.0 
New binaries 3.0
 2022-09-07 10:39:36 +02:00
Dirk 1af2aa6106 Review text, renew some paragraphs 
.. and update links, reflect name change to -bad
 2022-09-07 10:30:08 +02:00
Dirk 5eb07e1270 Add Darwin binary from #2224 2022-09-07 10:26:02 +02:00
Dirk 8aa59d4a9a New FreeBSD x64 binary 2022-09-07 10:26:02 +02:00
Dirk 714e7049eb New Linux 32 binary 2022-09-07 10:26:02 +02:00
Dirk 35470087b5 Add newer Linux 64 bit binaries 
* supporting xmpp-server, see #1575, #1589
* address security bug, see #2179
 2022-09-07 10:25:51 +02:00
Dirk WetterandGitHub 01e6535ec1 Merge pull request #2226 from dcooper16/fix_ct_30 
Fix certificate_transparency()
 2022-09-07 10:18:59 +02:00
Dirk WetterandGitHub 14ebd0fe5d Merge pull request #2228 from dcooper16/fix_data_after_finished_30 
Fix decrypting TLS 1.3 server response
 2022-09-07 10:17:14 +02:00
Dirk WetterandGitHub bac8cb73f6 Merge pull request #2219 from dcooper16/fix2198_30 
Fix #2198
 2022-08-26 10:12:40 +02:00
Dirk WetterandGitHub bed3cbe792 Merge pull request #2216 from drwetter/alpine3.15-dockerfile_3.0 
Upgrade Alpine version to the latest stable -1
 2022-08-22 20:27:24 +02:00
Dirk 594fabe5c5 Address codespell issue in roff file 
... by regenerating it with a newer ronn version.
 2022-08-22 20:25:08 +02:00
Dirk WetterandGitHub 1154a6bc25 Upgrade Alpine version to the latest stable -1 
3.15
 2022-08-22 16:35:23 +02:00
Dirk WetterandGitHub c730d9529e Merge pull request #2202 from drwetter/certupdate_3.0 
Cert update (3.0)
 2022-07-03 16:22:18 +02:00
Dirk Wetter b148f68a85 Update README.md 2022-07-02 22:29:44 +02:00
Dirk c9dd2320ee Remove the expired DST Root CA X3 cert from ... 
Apple / Linux / Microsoft stores
 2022-07-02 22:29:04 +02:00
Dirk 721d1ab560 Reference to remove DST Root CA 2022-07-02 22:29:04 +02:00
Dirk af84d0ca4c add new stores 2022-07-02 22:29:04 +02:00
Dirk f04aa2fe03 Java.pem from Oracle jdk-17.0.3.1 2022-07-02 22:29:04 +02:00
Dirk 8a7a321e35 Apple.pem: picked from Internet (see etc/Readme.md) 2022-07-02 22:29:04 +02:00
Dirk 31e2c014bc add loop for Apple.pem 2022-07-02 22:29:04 +02:00
Dirk 0248d112ce fine tune instructions for Apple.pem 2022-07-02 22:29:04 +02:00
Dirk e6cfb364a9 Update cert store: Linux + Mozilla 2022-07-02 22:29:04 +02:00
Dirk WetterandGitHub b1c5a33cec Merge pull request #2192 from drwetter/update_clients1_3.0 
Update client simulation for 3.0
 2022-05-31 21:53:48 +02:00
Dirk Wetter 95b687b0a9 Add a few files to be ignored.. 2022-05-31 20:26:03 +02:00
Dirk Wetter 6ac9c59135 correct ch_{ciphers,sni} 
That was due to a copy error from 3.1dev.
 2022-05-31 20:08:37 +02:00
Dirk Wetter 445d20c360 Update client simulation for 3.0 
see #2169, #2168

Added:
* Safari for macOS
* Java 17 LTS
* OpenSSL 3.0.3
* Android 11 and 12
* Go client (1.17)
* Firefox 100, Chrome and Edge 101 using Win10
* Thunderbird 91.9
* AppleMail
* LibreSSL from MacOS

* disabled Java 12 and Safari on OS X 10.12
* disabled Android < 6.0

* documention update how to add a client simulation
* add curves-mapping.txt file
 2022-05-31 17:08:40 +02:00
Dirk WetterandGitHub 2ca53116ca Merge pull request #2190 from EliteTK/3.0-fix-crime-tls1.3 
Fix CRIME test on servers only supporting TLS 1.3
 2022-05-25 08:39:09 +02:00
Dirk WetterandGitHub 897443f035 Merge pull request #2185 from drwetter/censys_fix_2127.3.0 
Fix censys link (3.0)
 2022-05-14 13:50:25 +02:00
Dirk 78e67d8fff Shorten censys link 
Remove sort order and fix the argument separator
 2022-05-14 11:52:45 +02:00
Dirk d38a8b283d Backport #2184, Censys link 
See #2127. The line is very long though: 152 chars
 2022-05-14 11:42:43 +02:00
Dirk WetterandGitHub 41deaf908d Merge pull request #2170 from drwetter/fix_banner_3.0 
Fix banner and remove STARTTLS NNTP CI check
 2022-05-04 12:12:39 +02:00
Dirk Wetter a773f00fce Fix banner and remove STARTTLS NNTP CI check 
On macOS in dark mode the git tag in grey wasn't visible. It was
changed now to light grey. It also works at least on Linux
using a light terminal background.

The NNTP server which we used for STARTTLS checks seems ofen
not to work. Thus this PR removes that for the 3.0 branch.
 2022-05-04 10:56:16 +02:00