Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,893 Commits 16 Branches 39 Tags
5c4500ea4f3f2fb86ed3ccd8511cc38a8e9a7b80
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub 068e07c52c Merge pull request #1997 from mig5/fix-letsencrypt-remove-dst-root-x3-ca-cert 
Remove the expired DST Root CA X3 cert from all trust stores, and ensure Mozilla's is up to date (fixes ISRG X1 alternate path)
 2021-10-02 08:38:34 +02:00
Dirk WetterandGitHub bab14124c1 Merge pull request #2001 from drwetter/revert-1998-1995-trusted-first 
Revert "In determine_trust(), use the OpenSSL '-trusted_first' flag to ignore the now-expired DST Root CA X3 root certificate"
 2021-10-02 08:34:07 +02:00
Dirk WetterandGitHub e874c1013b Revert "In determine_trust(), use the OpenSSL '-trusted_first' flag to ignore the now-expired DST Root CA X3 root certificate" 2021-10-02 08:33:39 +02:00
Dirk WetterandGitHub 624e934f77 Merge pull request #1998 from smokris/1995-trusted-first 
In determine_trust(), use the OpenSSL '-trusted_first' flag to ignore the now-expired DST Root CA X3 root certificate
 2021-10-02 08:33:03 +02:00
Dirk WetterandGitHub 667c6e698c Merge pull request #1996 from dcooper16/fix_md_formatting 
Update testssl.1.md
 2021-10-01 18:02:03 +02:00
Dirk WetterandGitHub b8bff805f7 Merge pull request #1991 from klaernie/contenttype 
fix html output content type header
 2021-09-24 14:21:04 +02:00
Dirk WetterandGitHub ae21ef7eab Merge pull request #1987 from drwetter/fix_1982_kali.cnf 
Fix #1982: Newer openssl.cnf break openssl detection
 2021-09-15 11:19:05 +02:00
Dirk Wetter 2405176a26 Fix #1982: Newer openssl.cnf break openssl detection 
Newer configuration files from openssl may include statements
which aren't compatible with our supplied old openssl version.
This commit adds an autodetection of such a file and uses a
openssl.cnf provided by this project then.
 2021-09-15 09:31:03 +02:00
Dirk WetterandGitHub 3207357e8c Merge pull request #1985 from DimitriPapadopoulos/codespell 
Typos found by codespell
 2021-09-14 13:37:59 +02:00
Dirk WetterandGitHub 3dddcbf445 Merge pull request #1983 from drwetter/drwetter-patch-1 
Update bug_report.md
 2021-09-10 18:37:43 +02:00
Dirk WetterandGitHub 611754165f Merge pull request #1984 from drwetter/drwetter-patch-2 
Update feature_request.md
 2021-09-10 18:37:17 +02:00
Dirk WetterandGitHub 5fc23932ac Update feature_request.md 2021-09-10 18:37:02 +02:00
Dirk WetterandGitHub 2f173de7e0 Update bug_report.md 2021-09-10 18:33:39 +02:00
Dirk WetterandGitHub 1d4acd9027 Merge pull request #1981 from drwetter/fix_1978 
Fix minor inconsistency in description of cipher categories
 2021-09-10 08:09:21 +02:00
Dirk 529e9da823 Fix GHA (starttls nntp) 
using another IP
 2021-09-09 23:17:09 +02:00
Dirk 15cfd849fe Replace --standard by --categories 2021-09-09 22:07:44 +02:00
Dirk 739f45015f Fix minor inconsistency in description of cipher categories 
A longer while back the section ~ "Testing standard ciphers" was
renamed to "Testing cipher categories". However the internal help
didn't reflect that.

This fixes that, including an addtion to the documentation.

Note: the help still lists "-s --std, --standard" as a cmd line
switch.
 2021-09-08 08:46:47 +02:00
Dirk WetterandGitHub 8f20d11830 Merge pull request #1976 from ap-wtioit/3.1dev-fix_dig_r_check 
Fix dig -r check to only run if dig is available
 2021-09-06 10:19:41 +02:00
Dirk WetterandGitHub 15e6fb4c9c Merge pull request #1975 from a1346054/fixes 
WIP: Minor cleanup
 2021-09-05 15:50:11 +02:00
Dirk WetterandGitHub 05ef9f91b6 Merge pull request #1972 from drwetter/fix_dig-r 
Fix cases where dig -r wasn't working
 2021-09-01 19:50:15 +02:00
Dirk bc742e0ea4 Amend previous commit 
* add -q in grep statement to make sure the console stays clean
* redo check for noidnout by also using the help function of dig
 2021-09-01 18:44:28 +02:00
Dirk f8a87315cf Fix cases where dig -r wasn't working 
* the ignore ~/.digrc option from dig is now parsed from the builtin help
* there was a potential DNS call which is now avoided
* for +noidnout check however there's a call to invalid. added
* the OPENSSL_CONF="" in check_resolver_bins() was moved a few lines
  higher to avoid other errors in the terminal

Tested on (EOL) Ubuntu 14.04 which only has dig in an older version

See also #1950
 2021-09-01 18:28:12 +02:00
Dirk WetterandGitHub ad3f7c3438 Merge pull request #1970 from drwetter/dependabot/github_actions/docker/build-push-action-2.7.0 
Bump docker/build-push-action from 2.6.1 to 2.7.0
 2021-08-30 10:19:39 +02:00
Dirk WetterandGitHub 9eaccee776 Merge pull request #1962 from dcooper16/fix1961 
Fix #1961
 2021-08-27 09:35:04 +02:00
Dirk WetterandGitHub be22ae2cf9 Merge pull request #1968 from jauderho/3.1dev 
Add GH Action to build Docker images
 2021-08-27 09:32:01 +02:00
Dirk WetterandGitHub f15da8d15d Merge pull request #1966 from drwetter/no_starttls 
Add CVEs for No-STARTTLS vulnerability
 2021-08-08 21:33:14 +02:00
Dirk aaf6409581 Add CVEs for No-STARTTLS vulnerability 
In text output only the original one from Wietse Venema.
The other known so far in JSON/CSV
 2021-08-08 21:30:35 +02:00
Dirk WetterandGitHub 89de30c867 Merge pull request #1965 from jauderho/gha_build_status 
Update build status to reflect use of GHA
 2021-08-08 14:00:14 +02:00
Dirk WetterandGitHub 77e47cadff Merge pull request #1963 from drwetter/fix_1956_3.1dev 
Redirect debugme() outputs to stderr (3.1dev)
 2021-08-07 16:18:43 +02:00
Dirk WetterandGitHub c1253f2cd0 Merge pull request #1953 from jauderho/3.1dev 
Add Dependenbot checking for GitHub Actions
 2021-08-07 16:17:33 +02:00
Dirk WetterandGitHub 7b0947c290 Merge pull request #1958 from dcooper16/use_all+ 
Use all+ in calls to tls_sockets()
 2021-08-07 16:04:07 +02:00
Dirk 3f8c62dc41 Change debugme1 calls to include redirection from stderr back to stdout 
The fact that debugme1() redirects to stderr and the calls to this functions
redo that is deliberately as in the future we might want to use debugme1
without redirection.
 2021-08-07 15:26:51 +02:00
Dirk 4e01f86c99 Redirect debugme() outputs to stderr (3.1dev) 
... to address #1956 and other places. Similar to #1957,
only for the 3.1dev rolling release branch.

Also it changes debugme1() back? to output debug
statements only when $DEBUG >= 1. Per default here
also stderr is used.
 2021-08-07 15:20:09 +02:00
Dirk WetterandGitHub 1739ae1400 Merge pull request #1960 from dcooper16/certificate_compression 
Check for RFC 8879 certificate compression
 2021-08-05 16:51:03 +02:00
Dirk WetterandGitHub b603d57146 Merge pull request #1952 from drwetter/fix_1717 
Look-ahead trick for -U --ids-friendly
 2021-08-01 17:47:11 +02:00
Dirk WetterandGitHub a3ab6cd887 Merge pull request #1950 from drwetter/digrc 
Ignore $HOME/.digrc
 2021-07-31 18:49:57 +02:00
Dirk 6cf7521184 Look-ahead trick for -U --ids-friendly 
If the order of the cmdline is '-U --ids-friendly' then we need to make sure we catch --ids-friendly. Normally we do not,
 see #1717. The following statement makes sure. In the do-while + case-esac loop  the check for --ids-friendly will be
executed again, but it does not hurt
 2021-07-31 18:27:03 +02:00
Dirk 439aad1f22 Ignore $HOME/.digrc 
Newer dig versions have an option to ignore $HOME/.digrc, older don't.

This commit adds a patch checking for the availability of such an option and
uses it by default. See #1894 .

If this option doesn't exist then still dig is used and can still lead to
wrong output. Unfortunately Debian-based distros are not very
good at this. Debian 10, Ubuntu 18.04 still use dig 9.11, whereas
Opensuse 15.2 has 9.16. Debian 11 and Ubuntu 20.04 use that too.
 2021-07-31 15:14:22 +02:00
Dirk WetterandGitHub c40a3a7d02 Merge pull request #1946 from drwetter/noitalics4screen 
Disable ANSI codes for italic when TERM == screen
 2021-07-31 13:57:11 +02:00
Dirk 525a40a653 Disable ANSI codes for italic when TERM == screen 
... otherwise it is being printed in reverse, see #1928.
 2021-07-31 13:17:55 +02:00
Dirk WetterandGitHub 46862ecc84 Merge pull request #1945 from drwetter/alpine 
Upgrade to alpine 3.13
 2021-07-30 18:01:25 +02:00
Dirk WetterandGitHub 68c5acb556 Upgrade to alpine 3.13 2021-07-30 18:01:12 +02:00
Dirk WetterandGitHub 820b728bc4 Merge pull request #1943 from drwetter/email-contrib 
E-Mail as a contribution possibility
 2021-07-30 15:02:19 +02:00
Dirk WetterandGitHub 2b74e9f55d E-Mail as a contribution possibility 
As some people may have a problem with the owner of github.
 2021-07-30 15:01:39 +02:00
Dirk WetterandGitHub 2935ecc2e1 Merge pull request #1938 from drwetter/nmap_portdetection_1931 
Improved SSL/TLS portdetection in nmap greppable files
 2021-07-30 09:48:50 +02:00
Dirk WetterandGitHub 70d40b416b Merge pull request #1940 from dcooper16/print_spaces_faster 
Print consecutive spaces faster
 2021-07-30 09:21:50 +02:00
Dirk 59c0b38140 see previous commit 2021-07-25 17:14:12 +02:00
Dirk defed8705b Extend TLS/SSL port detection 
As mentioned in #1931 the port detection for nmap greppable files
leaves space for improvements.

Ths PR adds a pattern detection of ssl and https in the forth or fifth
parameter of an open port, so those ports will be added to a scan when
a nmap greppable output file is as input to testssl.sh .

Also it does minor code adjustments to utils/gmap2testssl.sh .
 2021-07-25 17:09:30 +02:00
Dirk WetterandGitHub 18dfa26e48 Merge pull request #1936 from drwetter/fix_1935 
Fix problem when nmap file has .txt extension
 2021-07-25 16:34:58 +02:00
Dirk b1c1d250cf Redo utils/gmap2testssl.sh 
.. mainly copied from testssl.sh. Also it adds a detection for the
strings ssl and https. If those run at non-stanadard ports but nmap
detected it, it'll show up in the output file.

That will be backported to the main program, see #1931 .
 2021-07-25 16:28:50 +02:00
Dirk 5a7b7d8b8e Fix problem when nmap file has .txt extension 
This addresses a bug filed in #1935 in 3.1dev when the supplied file
has a .txt extension. In this scenario the input file was nulled
as from the input file in nmap format an internal input file was
generated which has a .txt extension, in the same directory.
The idea was to persist the file for the user.

Now, this internal input file is ephemeral and only written to $TEMPDIR.
 2021-07-25 13:05:40 +02:00
Dirk WetterandGitHub 05d087a564 Merge pull request #1933 from drwetter/drwetter-patch-1 
Update bug_report.md
 2021-07-21 09:22:38 +02:00
Dirk WetterandGitHub 8203049154 Update bug_report.md 2021-07-21 09:22:01 +02:00
Dirk WetterandGitHub 56dcbcdc15 Merge pull request #1924 from drwetter/fix_1915 
Fix redundant message (BREACH) when client certificate required
 2021-06-22 08:25:29 +02:00
Dirk WetterandGitHub f4bb1a20e2 Merge pull request #1925 from PeterDaveHello/Add.dockerignore 
Ignore FreeBSD & macOS OpenSSL binary in Dockerfile
 2021-06-19 18:17:51 +02:00
Dirk 28d9bc483d Fix redundant message (BREACH) when client certificate required 
same as #1916.

Fixes #1915
 2021-06-19 15:27:03 +02:00
Dirk WetterandGitHub 9f0d0c0062 Merge pull request #1921 from drwetter/gha_denylist 
Github actions modifications
 2021-06-19 12:30:00 +02:00
Dirk 2af7860a3c Remove mac osx 
... apt is probably not the right thing ;-)
 2021-06-19 11:17:52 +02:00
Dirk 247d08882e GHA: Fix push + PR 
see https://github.community/t/how-to-factor-paths-in-common-for-push-and-pull-request/115967/2

TL;DR:  There is no way to specify the common paths for two events
 2021-06-19 11:12:00 +02:00
Dirk 5cd97ddcb9 Correct YAML error in GHA + add macOS 
- yamllint to the rescue. Still shows an error though:
  4:3       error    syntax error: expected <block end>, but found '<block mapping start>' (syntax)

- added macos, see https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners
 2021-06-19 10:45:08 +02:00
Dirk b8a9b9c6db Github actions modifications 
- define deny list of files when modified not to run GHA
- specRitfy OS to be ubuntu-20.04 (is there a debian at all?)
- only use perl 5.26

While researching I stumbled over mac.osx as an OS one can specify. If anybody
knows whether this is really macosx (license?) please let me know. That
would be a great addition for CI. (Couldn't find BSD yet...)

See #1920
 2021-06-19 09:20:48 +02:00
Dirk WetterandGitHub 2d3bd724fc Merge pull request #1912 from PeterDaveHello/MakeShellScriptShebangConsistent 
Make Shell Scripts' Shebang more consistent
 2021-06-18 08:59:22 +02:00
Dirk WetterandGitHub cb844557f8 Merge pull request #1913 from PeterDaveHello/CorrectExitUsage 
Correct `exit` using, the exit status should be 0~255
 2021-06-18 08:55:22 +02:00
Dirk WetterandGitHub 35c43719dd Merge pull request #1919 from drwetter/rm_travisCIhook 
Remove travis CI hook
 2021-06-18 08:47:52 +02:00
Dirk Wetter f91c0251be Rmeove travis CI hook 
.. as we're using GHA now
 2021-06-18 08:44:36 +02:00
Dirk WetterandGitHub 17b172229d Merge pull request #1909 from mikelolasagasti/gha 
Add GitHub Actions testing
 2021-06-07 09:16:31 +02:00
Dirk WetterandGitHub 7da45a81f8 Merge pull request #1905 from drwetter/tz_fix+ 
Display time as suggested in utc (3.1dev)
 2021-06-03 20:19:29 +02:00
Dirk Wetter e1be4eabd2 Display time as suggested in utc (3.1dev) 
See #1895
 2021-06-03 19:24:50 +02:00
Dirk WetterandGitHub 0da8ce02cd Merge pull request #1904 from PeterDaveHello/AddBasicEditorConfig 
Add a basic .editorconfig into project
 2021-06-01 14:26:47 +02:00
Dirk WetterandGitHub 83909dec0c Merge pull request #1903 from PeterDaveHello/MakeVimModelineConsistent 
Add missing vim modeline config in sh & perl files
 2021-06-01 11:20:33 +02:00
Dirk WetterandGitHub 737ea1e7e5 Merge pull request #1902 from PeterDaveHello/MakeVimModelineConsistent 
Make vim modeline config consistent
 2021-06-01 08:34:23 +02:00
Dirk WetterandGitHub 1d306db062 Merge pull request #1900 from PeterDaveHello/ShebangConsistency 
Make Shell Scripts' Shebang more consistent and portable
 2021-05-31 10:17:47 +02:00
Dirk WetterandGitHub 893bb98a61 Merge pull request #1898 from PeterDaveHello/FixIndentation 
Fix indentation in testssl.sh
 2021-05-31 10:16:45 +02:00
Dirk WetterandGitHub 4d62f08308 Merge pull request #1899 from PeterDaveHello/IsGitHub 
Correct "GitHub" case as it should be
 2021-05-29 21:24:58 +02:00
Dirk WetterandGitHub d41ea6c814 Merge pull request #1896 from PeterDaveHello/FixCompressionDetection 
Fix compression detection variable syntax in run_breach()
 2021-05-28 22:29:11 +02:00
Dirk WetterandGitHub 1387b4ccb4 Merge pull request #1893 from drwetter/drwetter-patch-1 
Update feature_request.md
 2021-05-16 15:24:23 +02:00
Dirk WetterandGitHub 3fea4e01e1 Update feature_request.md 2021-05-16 15:24:06 +02:00
Dirk WetterandGitHub 46ad8801de Merge pull request #1892 from drwetter/drwetter-patch-1 
Update bug_report.md
 2021-05-16 15:07:19 +02:00
Dirk WetterandGitHub 188003ea97 Update bug_report.md 2021-05-16 15:07:08 +02:00
Dirk WetterandGitHub 15ace79a4c Merge pull request #1722 from vitaliytv/patch-1 
upd alpine to 3.12
 2021-05-15 12:27:41 +02:00
Dirk WetterandGitHub 325e7380b9 Merge pull request #1888 from dcooper16/send_to_stderr 
Print errors to stderr
 2021-05-15 12:22:34 +02:00
Dirk WetterandGitHub e4807a7c9a Merge pull request #1890 from dcooper16/specify_err_code 
Specify an error code in all calls to fatal()
 2021-05-13 18:46:05 +02:00
Dirk WetterandGitHub 17ad3d70a4 Merge pull request #1882 from drwetter/epoch_180hsts_1879 
Fix "off by one" error in HSTS
 2021-05-10 12:12:39 +02:00
Dirk Wetter a6f8aa61de Fix travis 
Respect changed HSTS epoch time of 180 days.

(DROWN output is changed too as the certificated changed but doesn't matter
as the travis check filters that)
 2021-05-10 11:28:25 +02:00
Dirk WetterandGitHub 2c3589742b Merge pull request #1884 from definity/3.1dev 
fixed minor bug with json output for TLS1.1
 2021-05-09 10:56:56 +02:00
Dirk Wetter 9121c7a3c9 Fix "off by one" error in HSTS 
There was by mistake a 179 days threshold and also the error message
was wrong when HSTS was exactly set to 179 days.

This commit sets it to 180 days and corrects the error messages on
both screen and JSON.
 2021-05-08 14:45:38 +02:00
Dirk WetterandGitHub 37a6b905a5 Merge pull request #1868 from dcooper16/improve_ossl30_support 
Improve compatibility with OpenSSL 3.0
 2021-04-08 15:00:28 +02:00
Dirk WetterandGitHub ac39aa5832 Merge pull request #1865 from drwetter/fix1860_svSE_etc_charset 
Ensure certain regex patterns work as expected and aren't localized
 2021-04-04 17:46:50 +02:00
Dirk 30bafe6d4f Ensure certain regex patterns work as expected and aren't localized 
see #1860 .

This PR is trying to address an issue where probably newer bash versions
is treated differently as in other locales, W is just a variant of V
see also e.g.

https://collation-charts.org/opensolaris/opensolaris.2008.05.sv_SE.UTF-8.html
https://www.sqlservercentral.com/forums/topic/order-by-name-not-works#post-1644177
 2021-04-04 11:55:29 +02:00
Dirk WetterandGitHub 1569bded44 Merge pull request #1864 from drwetter/rhs_quotes_fix 
Fix redundant quotes at RHS of ==
 2021-04-02 18:13:57 +02:00
Dirk 2101425c59 Fix redundant quotes at RHS of == 
While looking at #1860 there were two instances where
the right hand side of expressions in a double square
bracket had quotes.
 2021-04-02 17:01:36 +02:00
Dirk WetterandGitHub 269f92dea1 Merge pull request #1863 from drwetter/fix_unittest_61_diff 
Adjust master template for t/61_diff_testsslsh.t
 2021-04-02 16:59:47 +02:00
Dirk e71ebfea4a Adjust master template for t/61_diff_testsslsh.t 
... so that Travis CI works again
 2021-04-02 16:57:20 +02:00
Dirk WetterandGitHub 88f9e07ac6 Merge pull request #1862 from vin01/3.1dev 
Add xxd to docker image
 2021-04-01 09:39:55 +02:00
Dirk WetterandGitHub f3e00738f3 Merge pull request #1861 from vin01/3.1dev 
Use locally scoped counter in hex2binary
 2021-03-31 15:43:19 +02:00
Dirk WetterandGitHub b468071d72 Merge pull request #1859 from jschauma/3.1dev 
whitespace alignment
 2021-03-25 22:13:31 +01:00
Dirk WetterandGitHub d07b6bcd2b Merge pull request #1857 from jschauma/3.1dev 
add codepoints for RFC7905, ChaCha20-Poly1305
 2021-03-25 20:58:41 +01:00
Dirk WetterandGitHub 2a6eb51e1d Merge pull request #1853 from dcooper16/cleanup_hex2binary 
Cleanup conversion from ASCII-HEX to binary
 2021-03-24 13:51:45 +01:00
Dirk WetterandGitHub 016ab0673a Merge pull request #1856 from caillou/patch-1 
Fix typo
 2021-03-21 13:24:29 +01:00
Dirk WetterandGitHub 895a6b975d Merge pull request #1851 from mbogh/patch-1 
Added GitHub Action to External/related projects
 2021-03-11 10:42:52 +01:00