Commit Graph
100 Commits
Author SHA1 Message Date
Dirk 7b0fabdbc4 - making the read buffer for server hello bigger+variable 2016-03-08 10:38:21 +01:00
Dirk 483139f0a4 - show censy link by default 2016-03-05 21:35:30 +01:00
Dirk Wetter 28a6199109 - several code housekeepings
* SHOW_EACH_C has now the correct logic
  * pr_litemagenta ==> pr_warning
  * fileout WARN according to pr_warning then changed appropiately
  * some global vars in "" to avoid unneccessary shell expansion
  * HAS_SSL2/HAS_SSL3 now works more reliably
  * warning added in cipher order if ssl2/ssl3 is not supported by openssl
2016-03-05 21:07:49 +01:00
Dirk Wetter 118f897d6d Merge pull request #308 from skunkwerks/master
fix certificate_info() test
2016-03-04 00:33:25 +01:00
Dirk Wetter 1ead2e65bc - experimental label for DROWN 2016-03-03 20:04:20 +01:00
Dirk Wetter 6367693ccf - first check for DROWN #305 2016-03-03 19:50:44 +01:00
Dirk Wetter 752e6cdf56 - one outstanding openssl CVE issue wrt SSLv2
- first skeleton for DROWN #305
2016-03-03 11:56:25 +01:00
Dirk Wetter c4a68df423 Merge pull request #306 from thecky/severity
Rename pr_() from color to severity naming
2016-03-02 16:49:46 +01:00
Dirk Wetter 61ecf051e4 Merge pull request #300 from Dude4Linux/uppercase-severity-codes
Consistent case severity codes
2016-02-24 08:35:24 +01:00
Dirk Wetter 53e76b0545 Update Readme.md 2016-02-23 09:08:11 +01:00
Dirk 20cee1e788 - fix: relative redirect led to fp (https) 2016-02-22 10:44:43 +01:00
Dirk c70a13d014 - fix #296 (no recent regression as assumed) 2016-02-20 21:46:17 +01:00
Dirk 583584e095 - FIX #297
- FIX #243
- reformmated BEAST a bit (was screwed up in ! WIDE mode if too many ciphers
2016-02-20 14:10:04 +01:00
Dirk 71b4c03202 - fix key problem hpkp 2016-02-20 11:07:47 +01:00
Dirk Wetter 7846fc5fef Merge pull request #294 from b1gb1t/jsonCorrection
Correction of line 3607: new line (\n) corrupted the json format
2016-02-16 12:32:05 +01:00
Dirk Wetter 61c1669687 Merge pull request #292 from dcooper16/multiple_certificates
Detect multiple certificates cleanup
2016-02-14 00:08:52 +01:00
Dirk Wetter 79445ebe5b Merge pull request #293 from SietsevanderMolen/fix-json
fix json output
2016-02-12 15:11:45 +01:00
Dirk Wetter 70cd658447 - FIX #283 (regression from 1a8ed3d70a)
- minor output fixes for BEAST
- >4096 bit RSA keys labled in litemangenta now as it could have compatibility probs
- -V 0x.. or -V 0X.. gives at least a warning
2016-02-07 19:13:59 +01:00
Dirk Wetter b8f2540541 Merge pull request #286 from tjconcept/master
fix typo in b93fc824
2016-02-07 08:49:20 +01:00
Dirk b93fc82489 slightly better output for OCSP stapling 2016-02-06 22:31:32 +01:00
Dirk Wetter c60a39282c typo 2016-02-06 16:18:46 +01:00
Dirk Wetter 0f4eb221fb additions, naming of sources 2016-02-06 16:17:01 +01:00
Dirk Wetter 1fe9c95dc0 checkin (for future work) 2016-02-06 15:42:55 +01:00
Dirk Wetter 5491333693 Merge pull request #285 from dcooper16/mapping-rfc
Fix typo in etc/mapping-rfc.txt
2016-02-06 10:30:54 +01:00
Dirk 39226e05d2 openssl 1.1.0 2016-02-03 17:56:56 +01:00
Dirk a676742256 Remaining issues solved for OpenSSL 1.1.0 compliance, output corrections, CN/SNI improvements 2016-02-03 17:55:53 +01:00
Dirk 9cf3e21c3d - swapped sig_algo and server key size
- output improvements for unknown sig algos like GOST
2016-02-03 09:55:47 +01:00
Dirk ea18d2f02c - fix: discovering the CN for the default host (without SNI)
- CN parsing of certificate improved
- CN / subject can be also cyrillic now -- supposed the terminal supports the charset
2016-02-03 00:05:57 +01:00
Dirk Wetter 40d4cbb57f Update Readme.md 2016-02-01 22:42:49 +01:00
Dirk Wetter aff08b1ff2 Update CREDITS.md 2016-02-01 22:41:36 +01:00
Dirk dd65050ee1 - "secret" env switch shows during -e/-E the signature algorithm (see also #276)
- exp. date check corrected esp. for openssl 1.1.0
- warning relaxed for chain of trust
2016-02-01 22:06:27 +01:00
Dirk Wetter ff714a673f Merge pull request #280 from dcooper16/number_of_cert_bundles
Number of trusted certificate files in $INSTALL_DIR/etc/*.pem
2016-02-01 21:02:14 +01:00
Dirk Wetter f7853f36a0 - added SSL_CERT_FILE=/dev/null
- output cleanups in determine_trust()
2016-02-01 17:33:59 +01:00
Dirk Wetter 386234f794 Merge pull request #279 from dcooper16/chain_of_trust_fix
Fix chain of trust problem
2016-02-01 17:23:03 +01:00
Dirk Wetter 2f4e549dab - missing root certs 2016-02-01 16:27:20 +01:00
Dirk Wetter 8f9b38f7d4 - LF and other corrections for HPKP
- output corrections for 2 x HPKP (e.g. scotthelme)
2016-02-01 13:23:28 +01:00
Dirk 0bfe12742e correct signature keysizes, FIX #249 2016-02-01 10:19:23 +01:00
Dirk c62abaf215 fix colored output in wide mode (FIX #277) 2016-01-31 23:53:13 +01:00
Dirk 5ae9bb8c13 - typo in IPv4 header
- fixed recognition of XML,HTML to separate header
- fixed -V <pattern
2016-01-31 21:02:18 +01:00
Dirk 1726d3b41c minor change of color 2016-01-31 11:04:59 +01:00
Dirk 5e051c351a credit the cleanups of dcooper16 also 2016-01-31 10:55:45 +01:00
Dirk 49bc6592b8 multiple certs 2016-01-31 10:55:21 +01:00
Dirk f7baa560c2 - typos, etc 2016-01-31 10:54:45 +01:00
Dirk c564e305a7 - FIX #273 2016-01-31 01:55:23 +01:00
Dirk fc346a35fe - indentation reverted to old value if in only one certificate
- minor cleanups in the output
2016-01-30 23:59:29 +01:00
Dirk 5178e0db37 dcooper16 for the multiple certs thing 2016-01-30 23:57:00 +01:00
Dirk Wetter 8437bce546 Merge pull request #275 from dcooper16/multiplecerts
Detect multiple server certificates
2016-01-30 23:49:10 +01:00
Dirk 495b9cda9b - several fixes/improvements for new JSON/CSV file feature #268
* no color code in files
  * rc4 ciphers were missing
  * NODE was missing
  * calling of NODEIP/PORT was not neccessary
  * default naming of files similar to $LOGFILE
2016-01-23 23:33:17 +01:00
Dirk Wetter 447b6f6012 Update Readme.md 2016-01-23 21:28:37 +01:00
Dirk 8a2fe5915a - /usr/bin/printf --> printf 2016-01-23 20:33:46 +01:00
Dirk a8d08bbf92 update 2016-01-23 19:25:45 +01:00
Dirk 1a8ed3d70a - JSON/CSV from #268, labeled it experimental
- fixes partly #31
- several fixes to it (backticks, single sq brackets, renaming funcs, removed lf in JSON, ...)
2016-01-23 19:18:33 +01:00
Dirk 51e197c549 Merge branch 'master' of github.com:drwetter/testssl.sh 2016-01-23 13:34:04 +01:00
Dirk Wetter 477f6eb053 Merge pull request #270 from thecky/master
added colorblind option
2016-01-23 09:35:52 +01:00
Dirk 9880bd6a49 - added 0xc072-0xc079, 0xc033-0xc03B 2016-01-20 15:04:12 +01:00
Dirk a1ef935903 20 CCM cipher added 2016-01-20 14:17:38 +01:00
Dirk Wetter 3579cf2953 Merge pull request #267 from thecky/master
added --mapping=no-rfc
2016-01-20 12:32:19 +01:00
Dirk b97788ba73 typo fixed 2016-01-15 17:30:47 +01:00
Dirk 0d767dad8f - mentioning where the client data comes from 2016-01-15 17:05:43 +01:00
Dirk 5257c2f38a - inline license clarifications
(separate file needed later)
2016-01-15 17:04:16 +01:00
Dirk a9643b6d1e - hooks for rfc/non-rfc
- FIX for beast: no CBC cipher at all is  now displayed
- minor cosmetic stuff
2016-01-15 16:37:47 +01:00
Dirk edd689b53e client check 2016-01-15 16:27:18 +01:00
Dirk 2871aaaee3 - optical cleanups for #265
- don't do browser tests for non-HTTP services
2016-01-15 15:53:03 +01:00
Dirk e68fcc9dad - remove duplicates 2016-01-15 15:15:29 +01:00
Dirk Wetter 8b22e1be19 Merge pull request #265 from seccubus/feature/client-sims
Feature/client sims
2016-01-15 14:07:13 +01:00
Dirk 5ff214b894 updates, failed e.g. at github.com 2016-01-13 19:34:11 +01:00
Dirk dc4f90ac48 missing linefeed 2015-12-29 17:07:03 +01:00
Dirk b962ccde53 FIX #262 2015-12-29 10:05:20 +01:00
Dirk 3b17c9e321 cosmetic corrections to help 2015-12-27 14:51:18 +01:00
Dirk 08947b3267 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-12-27 13:34:26 +01:00
Dirk 914e364d1e - fix headline for non-socket support 2015-12-27 13:33:53 +01:00
Dirk Wetter eb66955c96 Update Readme.md 2015-12-24 23:13:20 +01:00
Dirk e10da3a78a - minor adjustmentents to program style 2015-12-24 23:00:23 +01:00
Dirk Wetter a0e91964d8 Update CREDITS.md 2015-12-24 12:41:52 +01:00
Dirk 5c19bf5892 - fix for web sites having leading spaces b4 html/xml content starts 2015-12-22 21:08:52 +01:00
Dirk c3269f1927 - Fixes for #260 2015-12-22 20:31:52 +01:00
Dirk Wetter f65fa69c3c Merge pull request #248 from lainegholson/master
Add HTTP2/ALPN support
2015-12-22 12:05:53 +01:00
Dirk Wetter 0d53013c47 Merge pull request #260 from seccubus/feature/redirect_test
Redirect test that doesn't depend om JSON/CSV output
2015-12-21 21:14:13 +01:00
Dirk bac7cde3bd - re-adjusted preference for rfc/iana mapping file 2015-12-11 13:13:22 +01:00
Dirk 5ff5a189fb better place for mapping file 2015-12-08 17:53:46 +01:00
Dirk 867d698a16 - days left until expiration 2015-12-08 17:51:46 +01:00
Dirk 1f39ab8241 - fix timestamp in log file 2015-12-08 16:37:35 +01:00
Dirk 041b77c5ed - sanity check whether URL/URI is last arg
- typo fix while logging (fall back CVS tags weren't written
2015-12-08 13:31:52 +01:00
Dirk 2e0e7b83d5 reverse non-typo
drill comes later
2015-11-28 17:33:10 +01:00
Dirk Wetter ad8f82f190 Merge pull request #240 from k0ste/master
Add drill support (ldns lib), fix mistype
2015-11-28 17:14:18 +01:00
Dirk Wetter 7113039daa Merge pull request #241 from lainegholson/master
Show SHA384 certificates as secure
2015-11-27 21:09:08 +01:00
Dirk f76d07d43e - logging now the cmd line, FIX #238
- internal improvements of stdout banner
2015-11-21 13:39:37 +01:00
Dirk Wetter 3d869920d0 Merge pull request #237 from lainegholson/master
Fix filename typo
2015-11-15 16:00:37 +01:00
Dirk Wetter 10422f927a Merge pull request #235 from alarmschaben/master
Lamest pull request ever: fixed typo in parameter descriptions
2015-11-13 07:54:01 +01:00
Dirk 0bb795abe2 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-11-11 17:50:00 +01:00
Dirk 5749051839 - fix vertical distances after PFS && wide
- fix misleading "--ip=v4only" in help
2015-11-11 17:49:36 +01:00
Dirk Wetter 92666b8a16 Update Readme.md 2015-11-11 12:10:56 +01:00
Dirk 756a6ab41d - NEW: logging of stdout!
- rearragments in global var declaration for better readability
2015-11-11 11:56:32 +01:00
Dirk 87592aafd9 - line space for some single vuln. adjusted 2015-11-08 22:14:28 +01:00
Dirk Wetter 4ac7713a22 Merge pull request #229 from lainegholson/master
mDNS Fixes
2015-11-08 22:02:38 +01:00
Dirk Wetter 2abad4c258 Update Readme.md 2015-11-05 08:37:48 +01:00
Dirk Wetter eeceece212 add '-bugs' so that buggy F5s can be better tested 2015-11-03 23:30:52 +01:00
Dirk Wetter 50c5f0b93d add '-bugs' so that buggy F5s can be better tested 2015-11-03 23:29:53 +01:00
Dirk e390345629 typo 2015-11-03 19:51:45 +01:00
Dirk c272878c73 - warning session tickets -> PFS 2015-11-03 19:51:05 +01:00