8ff39c5028
- client based authentication, FIX #215
...
- SSL Session ID support test
2015-11-03 13:13:10 +01:00
0463471c40
- fixing side effect from #225
...
- other minor output corrections
2015-11-03 10:30:59 +01:00
84e6be3547
- revert part of #225
...
- clarify name of bool var for type of tput
2015-11-02 10:49:40 +01:00
8b54609c3d
Merge pull request #225 from Harinus/master
...
Fix: tput: No value for $TERM and no -T specified
2015-11-02 10:40:59 +01:00
8c173764bd
Use 'awk' instead of 'sed -E'
2015-11-01 10:40:44 -06:00
686dd511a6
Add support for .local domains with avahi
2015-10-31 20:01:52 -05:00
6a8d4870ab
Missing space ;)
...
Whoops... edited this from the github webpage..
2015-10-30 09:56:48 +01:00
9bfeac19bc
Fix: tput: No value for $TERM and no -T specified
...
Avoid "tput: No value for $TERM and no -T specified" when running from CGI or similar by checking for interactive shell
2015-10-30 09:46:35 +01:00
62af7be5a1
Added check for availability oftput ( Fixes #222 )
...
Slight change due to drwetter's comment
2015-10-25 22:31:44 +10:00
4095dc53be
Changed wording for easier readability.
2015-10-16 14:40:06 +01:00
7bf1319c93
- FIX #218 for exim and friends
2015-10-15 15:14:37 +02:00
eb49132682
- changed headline for each sub test from blue to underline+bold
...
- save determine_service log
2015-10-15 14:15:07 +02:00
78fab8addb
- FIX #213 , wording
2015-10-13 22:25:01 +02:00
d4dbf1138c
- FIX #214
2015-10-13 08:31:54 +02:00
1a1f007ef9
- banner f'up reversed
2015-10-11 23:34:53 +02:00
8c0786d147
- switched on clientauth functionality (missed b4)
2015-10-11 23:23:35 +02:00
b9bfd48871
- client based auth (see sclient_connect_successful() works now, see #206 )
...
- careful regression tests for this, point open: speed
- test for more TLS extensions
- heartbleed() does now before a check whether heartbeat is available to save time
- breach simplyfied (and doesn't have to be killed in seldom cases)
- tmpfiles are only being erased after exit not after each function
- user agent is testssl -- unless --sneaky is chosen
- global host vars are now being resetted to prevent side effects
- tls version in record layer is now always 1
- used ERRFILE wherever possible
- smaller code cleanups
2015-10-11 23:07:16 +02:00
0600e39b45
- fix screw up of rDNS display for those few folks having only IPv4 ;-)
2015-10-06 12:30:29 +02:00
f8d6a2fb6d
- IPv6 formatting fixed, see #11 (points 3,4,5)
...
5 cannot be done automagically, see issue
2015-10-05 09:56:21 +02:00
a0d634f94a
- ouput corrections for BEAST
2015-10-04 12:32:29 +02:00
41bc2fb70c
- regression wrt what_dh
2015-10-03 00:14:52 +02:00
f3cef41053
- some speed improvements (sed, tr --> bash internal s'n'r)
...
- revamped BEAST a bit: availablity of higher protocols lead now to yellow color, see #208
- Fixed error in BEAST (no higher protos led to no message)
- made BEAST it faster: one check for protocol ssl3+tls1 upfront, see #208
2015-10-01 13:27:14 +02:00
2ca6c2b0dc
improved variable naming, scope and worked around length limitation of cipher list, as suggested by @drwetter
2015-09-30 14:54:39 +02:00
449aada392
fix CBC cipher selection
...
CBC cipher selection is not so easy using the openssl tool alone. Selecting the cipher based on the string CBC occuring in it would be right if it’s
about the RFC name of the cipher but not so with the openssl naming. Since CBC ciphers are not going to be continued anyway, I think it’s safe to take
a static list. However, it’s easy to extract it from the cipher list in openssl-rfc.mapping.html, but we certainly don’t want to require that file to
be shipped all the time.
2015-09-30 12:44:27 +02:00
1c1eaa53d8
- fix for renamed http_header function
2015-09-29 18:47:49 +02:00
cac49cb1f1
- "--file" implicitly does "--warnings=batch"
...
- "--file" works now fine with equal sign
- fixed load balancer issue where header request stalled and testssl.sh consequently too
- http_date needed to be changed too because of that
- needed to estimate then the http_date when request was killed (HAD_SLEPT)
will Mr. Spock like this??
- fixed load balancer issue where header request for breach test stalled and thus an error was displayed
- code improvements
2015-09-28 22:54:00 +02:00
feaef680aa
- IPv6 #11 is 80% working (whohoo!). Needed is an openssl capable IPv6 and HAS_IPv6=true in the environment
...
- FIX #191
2015-09-26 22:44:33 +02:00
cc81642ee3
- #FIX 202 (EV detection from TERENA/Digicert)
2015-09-25 14:35:42 +02:00
a2efc201b7
- added a failure condition for trust check
2015-09-24 09:10:43 +02:00
06466cca92
- proxy in determine_trust was missing
2015-09-23 09:03:47 +02:00
0b1e573fc9
- FIX #190 : Server temp key backport for RH-ish systems works now automagically
...
- just to be sure there's a cmd line flag --has-dhbit / env HAS_DH_BITS
- some reordering
2015-09-22 20:09:26 +02:00
4b57a22f6e
- FIX #198 (date env problem under BSD and maybe others)
2015-09-22 17:14:36 +02:00
1668daa04e
- NEW: chain of trust -- for openssl 1.0.2 only
...
- FIX #97
2015-09-22 15:05:59 +02:00
3eeb1f9d9d
- check whether dig, host or nslookup is there. The error message is now describing the cause
2015-09-21 16:43:47 +02:00
23802e219d
- #FIX 197
...
- renamed a variable
2015-09-21 14:03:48 +02:00
6406e1828d
- minor polish of output
2015-09-19 15:03:40 +02:00
413b64c44a
- fixed proxy name resolution and make it more robust
...
- additional line if a proxy is used above rDNS
2015-09-18 15:12:01 +02:00
945d26d222
- changed version number
...
- retabed to five spaces
2015-09-17 15:30:15 +02:00
58096d6633
2.6 release
2015-09-15 08:49:00 +02:00
467988fb0a
- improved resilience in cipher order check
...
- improved also there compatibility with intolerant IIS6 servers
2015-09-14 12:54:54 +02:00
a2ba43ec78
- litemagenta should be used for not fatal conditions / magenta for fatal conditions (prg terminates then)
2015-09-14 11:12:37 +02:00
9b08cb7584
- FIX /workaround for #188 ( https://github.com/drwetter/testssl.sh/issues/188 )
...
- bumped up version to rc4
2015-09-14 11:03:10 +02:00
a9f231b3ff
- fix where an $PID"ERRFILE" was written
2015-09-09 16:41:32 +02:00
d28317f2d0
- exit code always 0 unless an error occured
...
- enable devel feaure of SSLv2 via socket
2015-09-08 19:30:03 +02:00
566a059250
- fix for issue when a non-HTTP service indicates a misleading non-match of certificate
...
- wildcard check
2015-09-06 18:21:08 +02:00
b9bfa2355a
fix for scott helme's multiple keys ( https://scotthelme.co.uk/hpkp-toolset )
2015-09-04 14:19:06 +02:00
422b4d511a
minor cleanups for finding openssl binaries
2015-09-04 10:04:56 +02:00
6a036cd7d4
removed hardcoded obsolete paths for binaries
2015-09-03 13:26:02 +02:00
1c5870e3e3
typo, fix from Stefan Stidl (thx!)
2015-09-03 12:17:32 +02:00
489baa1299
unitize programming styles: ${var} --> $var, double square brackets instead of single
2015-09-03 12:14:47 +02:00
