Commit Graph

5241 Commits

Author SHA1 Message Date
Dirk
7823699982 json and html unit tests more seamless
- html_file / json_file
- file name comes in command, not earlier
- Both a title
- avoid fixed string for file names over and over
2025-11-27 20:38:12 +01:00
Dirk
964e8924a4 define file var before using it 2025-11-27 19:45:39 +01:00
Dirk Wetter
a4b6d1fca0 spellcheck 2025-11-27 18:49:12 +01:00
Dirk Wetter
f3ebf0e971 Add autoflush thingy for MAcOS 2025-11-27 18:46:19 +01:00
Dirk Wetter
853da2a9de term pattern seems better than the "colorized list" 2025-11-27 18:39:52 +01:00
Dirk Wetter
3591f70a17 reorder lines 2025-11-27 18:31:43 +01:00
Dirk Wetter
8103a0e24d Make this work undeer MacOS
- URI is now example.com bc Akamai doesn't block too many checks
  (MacOS runner was delayed and often hiccuped here)
- failed to flush message --prevention
- term pattern seems better than the "colorized list"
2025-11-27 18:24:15 +01:00
Dirk Wetter
7e97fef030 remove LFs and comment 2025-11-27 18:22:48 +01:00
Dirk Wetter
fc499cb67f Akamai keeps connection open (opossum check problem) 2025-11-27 18:21:26 +01:00
Dirk Wetter
0ef742a17a Just add comments, reorder lines 2025-11-27 17:44:31 +01:00
Dirk Wetter
4582bd8d73 Merge branch '3.3dev' into address_2952 2025-11-27 16:37:16 +01:00
Dirk Wetter
86700dbd7a Merge pull request #2957 from testssl/flush
Try to remove the "failed to flush stdout" messages
2025-11-27 16:34:40 +01:00
Dirk Wetter
de6e92826a Add stdout flush 2025-11-27 14:23:27 +01:00
Dirk Wetter
5111804b75 Try to remove the "failed to flush stdout" messages 2025-11-25 00:23:13 +01:00
Dirk Wetter
e8098fc1d2 fix remainder from old os definition 2025-11-24 12:03:03 +01:00
Dirk Wetter
dd696bb871 Merge pull request #2955 from testssl/shellcheck_path_improvement
No shellcheck in ./t/
2025-11-24 11:20:18 +01:00
Dirk Wetter
92e0195118 No shellcheck in ./t/ 2025-11-24 11:19:13 +01:00
Dirk Wetter
d359e1108d proper definition of os variable 2025-11-24 11:07:16 +01:00
Dirk Wetter
7ba99cd1e9 For MacOS we rather use homebrew's OpenSSL 2025-11-24 11:04:59 +01:00
Dirk Wetter
7b2804df41 remove STARTTLS 2025-11-24 10:48:41 +01:00
Dirk Wetter
4ad81cea9b Merge pull request #2953 from testssl/dependabot/github_actions/actions/checkout-6
Bump actions/checkout from 5 to 6
2025-11-21 15:12:34 +01:00
Dirk Wetter
7423aa8add Merge pull request #2951 from testssl/fixAndImprove_opossum_check_2950
Fix and improve Opossum check
2025-11-21 15:11:07 +01:00
dependabot[bot]
ba4855026f Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-21 00:02:35 +00:00
Dirk
76824b5762 Fix and improve Opossum
Under some circumstances the opossum vulnerability check got stuck
because the cat commdn was waiting for reading from the descriptor.
In some case like #2950 this happened when the HTTP head command
was incorrectly send in the first place.

This PR makes sure that the HTTP head is correct and it replaces
cat by read in a loop so that the HTTP response is read without
being blocked.

Also for http_head_printf() the argumensats passed were cleaned up.
2025-11-19 20:55:20 +01:00
Dirk Wetter
718c6fe4ed Merge pull request #2947 from 24icewolf42/fix-mtls-client-pem-check
Add support for EC private key in mTLS check
2025-11-17 11:19:09 +01:00
Andreas Landgraf
91caad69c5 Improve regex for private key check in mTLS 2025-11-17 08:26:15 +01:00
Dirk Wetter
1394cc8d7d Merge pull request #2949 from testssl/shellcheck_ignore_files
Ignore files types for shellcheck
2025-11-15 14:43:59 +01:00
Dirk Wetter
fd97a75241 Add comments for paths_ignore 2025-11-15 14:05:08 +01:00
Dirk Wetter
c07d17ea8f Fix indentation + comment wrt paths_ignore 2025-11-15 13:56:19 +01:00
Dirk Wetter
00476b751a Ignore files types for shellcheck 2025-11-15 13:39:09 +01:00
Dirk Wetter
12e4ebd203 Merge pull request #2948 from testssl/ratingdoc_update
Update docs after raiting only switch
2025-11-15 13:37:06 +01:00
Dirk Wetter
c9a886c396 Update docs after riing only swicth
see #2945
2025-11-15 13:31:42 +01:00
Andreas Landgraf
7c62ae5d2e Add support for EC private key in mTLS check 2025-11-13 16:57:11 +01:00
Dirk Wetter
ae48b680fa Merge pull request #2945 from magnuslarsen/3.3dev
feat: --rating-only flag to only test checks required for rating
2025-11-13 08:00:15 +01:00
Magnus Larsen
640444e1fc feat: --rating-only flag to only test checks required for rating 2025-11-12 11:14:16 +01:00
Dirk Wetter
932c91f67c Merge pull request #2941 from testssl/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-11-11 16:46:21 +01:00
dependabot[bot]
bdf62198a8 Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-11 00:10:32 +00:00
Dirk Wetter
4ba3500b0b Merge pull request #2940 from testssl/shellcheck_cherrypicked_2428
Shellcheck cherrypicked from PR #2428
2025-11-10 14:37:35 +01:00
Dirk Wetter
d4cc41405f Skipping push as it seems expensive and may cause delays
... no bypasses for direct commit for those changes anyway
2025-11-10 12:29:05 +01:00
Dirk Wetter
2fcd01c693 fix FP 2025-11-10 12:15:58 +01:00
Dirk Wetter
0347f2ffee 24.04 Ubuntu's instead of latest 2025-11-10 12:05:42 +01:00
meisam
191b1e791d add shellcheck to ci 2025-11-10 12:01:06 +01:00
Dirk Wetter
f219fd6ca3 Merge pull request #2938 from testssl/fix_2937
Fix pattern for matching /etc/hosts entries
2025-11-03 23:39:04 +01:00
Dirk
da8a6f2f34 Fix pattern for matching /etc/hosts entries
`grep -w` matches also `string1-whatsoever` so that entries like

```
192.168.0.10 anystring anystring-apache
192.168.0.11 anystring-tomcat
```

matched 3 entries over 2 lines.

This PR fixes #2937 by improving the match pattern, so that
`string1` needs a trailing whitespace or a EOL -- besides a
leaing whitespace.
2025-11-03 22:30:26 +01:00
Dirk Wetter
c19d3fff0c Merge pull request #2935 from testssl/fix_2933
Add new Sectigo R46 cert, update Java/Mozilla.pem
2025-11-01 18:00:27 +01:00
Dirk
3e495f456a Add new Sectigo R46 certs + update Java/Mozilla.pem
Fixes #2933 .
2025-11-01 14:15:36 +01:00
Dirk Wetter
a0c99d855e Merge pull request #2934 from testssl/shorten_badssl
Shorten badssl GHA as they fail too often
2025-10-30 20:41:46 +01:00
Dirk
1ce514d95f Shorten badssl GHA as they fail too often
* Remove checks which aren't needed in t/51_badssl.com.t t/33_isJSON_severitylevel_valid.t
* tryying to make some files more readable
2025-10-30 18:35:43 +01:00
Dirk Wetter
0b9715c239 Merge pull request #2930 from testssl/fix_2929
Fix date parsing bc of locale problem
2025-10-30 15:54:23 +01:00
Dirk
da436e7d87 Fix date parsing bc of locale problem
The new block making sure that rust coreutils work properly (PR #2913)
introduced a new check in order to determine which date functions
to use.

The function however parsed only for English error messages ("No such file").
This PR fixes that by setting LC_ALL to C.

Fixes #2929 .
2025-10-30 13:30:08 +01:00