Commit Graph

5255 Commits

Author SHA1 Message Date
Dirk Wetter
7a0b62e689 Merge pull request #2961 from testssl/fix_2960
Label missing KEMs as LOW severity
2025-12-09 12:43:05 +01:00
Dirk Wetter
03f43ecd68 Label missing KEMs as LOW severity 2025-12-09 10:15:50 +01:00
Dirk Wetter
1250d6f853 Merge pull request #2958 from testssl/fix_early_data_empty
Fix error when early data empty
2025-11-29 22:38:18 +01:00
Dirk
ece7bce138 Merge branch '3.3dev' into fix_early_data_empty 2025-11-29 20:55:56 +01:00
Dirk Wetter
2b73544efc Merge pull request #2954 from testssl/address_2952
Address 2952
2025-11-29 20:53:43 +01:00
Dirk Wetter
8ed4b4218c this may fix it 2025-11-29 18:43:00 +01:00
Dirk Wetter
d92769d15c trying again to make Mac work 2025-11-29 13:45:00 +01:00
Dirk
17896a44a5 move unlink 2025-11-28 17:23:50 +01:00
Dirk
4bc0a5ccba Change back to google.com, avoid 0-RTT for Mac
... as we can't make it to get proper results unless
on the laptop
2025-11-28 16:26:25 +01:00
Dirk Wetter
d3c33867d7 Rather try cloudflare...
instead of google.com. Maybe google's edge server to github has
different configuration and thus has not 0-RTT.

On my Mac it worked fine before.
2025-11-28 13:28:58 +01:00
Dirk
2b06c97f19 Add 0-RTT, more in line with other files
... and simplyfied
2025-11-28 03:20:10 +01:00
Dirk Wetter
d648a0851d Fix error when early data empty
This PR fixes an error when early data was empty
which caused testssl.sh to exit instead of marking
that there was no file returned.

Also it changes HEAD to GET as the latter is probably
more often supported.

There needs to be a unit test for 0-RTT / early data!
2025-11-28 01:46:16 +01:00
Dirk
b1d79b6d72 change style to be in line w others 2025-11-28 01:21:19 +01:00
Dirk
3a0a6eaf88 re-add $ 2025-11-27 22:17:54 +01:00
Dirk
7823699982 json and html unit tests more seamless
- html_file / json_file
- file name comes in command, not earlier
- Both a title
- avoid fixed string for file names over and over
2025-11-27 20:38:12 +01:00
Dirk
964e8924a4 define file var before using it 2025-11-27 19:45:39 +01:00
Dirk Wetter
a4b6d1fca0 spellcheck 2025-11-27 18:49:12 +01:00
Dirk Wetter
f3ebf0e971 Add autoflush thingy for MAcOS 2025-11-27 18:46:19 +01:00
Dirk Wetter
853da2a9de term pattern seems better than the "colorized list" 2025-11-27 18:39:52 +01:00
Dirk Wetter
3591f70a17 reorder lines 2025-11-27 18:31:43 +01:00
Dirk Wetter
8103a0e24d Make this work undeer MacOS
- URI is now example.com bc Akamai doesn't block too many checks
  (MacOS runner was delayed and often hiccuped here)
- failed to flush message --prevention
- term pattern seems better than the "colorized list"
2025-11-27 18:24:15 +01:00
Dirk Wetter
7e97fef030 remove LFs and comment 2025-11-27 18:22:48 +01:00
Dirk Wetter
fc499cb67f Akamai keeps connection open (opossum check problem) 2025-11-27 18:21:26 +01:00
Dirk Wetter
0ef742a17a Just add comments, reorder lines 2025-11-27 17:44:31 +01:00
Dirk Wetter
4582bd8d73 Merge branch '3.3dev' into address_2952 2025-11-27 16:37:16 +01:00
Dirk Wetter
86700dbd7a Merge pull request #2957 from testssl/flush
Try to remove the "failed to flush stdout" messages
2025-11-27 16:34:40 +01:00
Dirk Wetter
de6e92826a Add stdout flush 2025-11-27 14:23:27 +01:00
Dirk Wetter
5111804b75 Try to remove the "failed to flush stdout" messages 2025-11-25 00:23:13 +01:00
Dirk Wetter
e8098fc1d2 fix remainder from old os definition 2025-11-24 12:03:03 +01:00
Dirk Wetter
dd696bb871 Merge pull request #2955 from testssl/shellcheck_path_improvement
No shellcheck in ./t/
2025-11-24 11:20:18 +01:00
Dirk Wetter
92e0195118 No shellcheck in ./t/ 2025-11-24 11:19:13 +01:00
Dirk Wetter
d359e1108d proper definition of os variable 2025-11-24 11:07:16 +01:00
Dirk Wetter
7ba99cd1e9 For MacOS we rather use homebrew's OpenSSL 2025-11-24 11:04:59 +01:00
Dirk Wetter
7b2804df41 remove STARTTLS 2025-11-24 10:48:41 +01:00
Dirk Wetter
4ad81cea9b Merge pull request #2953 from testssl/dependabot/github_actions/actions/checkout-6
Bump actions/checkout from 5 to 6
2025-11-21 15:12:34 +01:00
Dirk Wetter
7423aa8add Merge pull request #2951 from testssl/fixAndImprove_opossum_check_2950
Fix and improve Opossum check
2025-11-21 15:11:07 +01:00
dependabot[bot]
ba4855026f Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-21 00:02:35 +00:00
Dirk
76824b5762 Fix and improve Opossum
Under some circumstances the opossum vulnerability check got stuck
because the cat commdn was waiting for reading from the descriptor.
In some case like #2950 this happened when the HTTP head command
was incorrectly send in the first place.

This PR makes sure that the HTTP head is correct and it replaces
cat by read in a loop so that the HTTP response is read without
being blocked.

Also for http_head_printf() the argumensats passed were cleaned up.
2025-11-19 20:55:20 +01:00
Dirk Wetter
718c6fe4ed Merge pull request #2947 from 24icewolf42/fix-mtls-client-pem-check
Add support for EC private key in mTLS check
2025-11-17 11:19:09 +01:00
Andreas Landgraf
91caad69c5 Improve regex for private key check in mTLS 2025-11-17 08:26:15 +01:00
Dirk Wetter
1394cc8d7d Merge pull request #2949 from testssl/shellcheck_ignore_files
Ignore files types for shellcheck
2025-11-15 14:43:59 +01:00
Dirk Wetter
fd97a75241 Add comments for paths_ignore 2025-11-15 14:05:08 +01:00
Dirk Wetter
c07d17ea8f Fix indentation + comment wrt paths_ignore 2025-11-15 13:56:19 +01:00
Dirk Wetter
00476b751a Ignore files types for shellcheck 2025-11-15 13:39:09 +01:00
Dirk Wetter
12e4ebd203 Merge pull request #2948 from testssl/ratingdoc_update
Update docs after raiting only switch
2025-11-15 13:37:06 +01:00
Dirk Wetter
c9a886c396 Update docs after riing only swicth
see #2945
2025-11-15 13:31:42 +01:00
Andreas Landgraf
7c62ae5d2e Add support for EC private key in mTLS check 2025-11-13 16:57:11 +01:00
Dirk Wetter
ae48b680fa Merge pull request #2945 from magnuslarsen/3.3dev
feat: --rating-only flag to only test checks required for rating
2025-11-13 08:00:15 +01:00
Magnus Larsen
640444e1fc feat: --rating-only flag to only test checks required for rating 2025-11-12 11:14:16 +01:00
Dirk Wetter
932c91f67c Merge pull request #2941 from testssl/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-11-11 16:46:21 +01:00