Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-01-07 09:10:57 +01:00
Code Issues Packages Projects Releases Wiki Activity
3,422 Commits 15 Branches 30 Tags 212 MiB
8d6609f1b9
Commit Graph

3422 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk
8d6609f1b9 Ignore $HOME/.digrc 
Newer dig versions have an option to ignore $HOME/.digrc, older
don't.

This commit adds a patch checking for the availability of
such an option and uses it by default.

If doesn't exist then still dig is used and can still lead to
wrong output. Unfortunately Debian-based distros are not very
good at this. Debian 10, Ubuntu 18.04 still use dig 9.11, whereas
Opensuse 15.2 has 9.16.

Debian 11 and Ubuntu 20.04 use that too.

Thus to be considered for the stable 3.0-branch: move
dig in the resolver functions a couple of lines down.
 2021-07-31 14:37:36 +02:00
Dirk Wetter
5d4945819a
Merge pull request #1944 from drwetter/docker_3.0 
Docker updates
 2021-07-30 17:36:20 +02:00
Dirk Wetter
4e8dd46815 Update description 
* tar.gz is now from testssl.sh
    * git clone refers to 3.0 instead of 3.1dev
 2021-07-30 17:34:56 +02:00
Dirk Wetter
6ffbf1bfa4 Update description 
* tar.gz is now from testssl.sh
* git clone refers to 3.0 instead of 3.1dev
 2021-07-30 17:33:08 +02:00
Dirk Wetter
5df1a2e7b9 Upgrade to alpine 3.12 
... as 3.11 is in a couple of months EOL .

I do not expect difficulties as we run 3.12 already in 3.1dev.
 2021-07-30 17:23:51 +02:00
Dirk Wetter
e7713f8012
Merge pull request #1942 from drwetter/nmap_portdetection_1931_3.0 
Improved SSL/TLS portdetection in nmap greppable files (3.0)
 2021-07-30 15:51:23 +02:00
Dirk Wetter
5ae17681f6 Improved SSL/TLS portdetection in nmap greppable files (3.0) 
As mentioned in #1931 the port detection for nmap greppable files
leaves space for improvements.

Ths PR adds a pattern detection of ssl and https in the forth or fifth
parameter of an open port, so those ports will be added to a scan when
a nmap greppable output file is supplied as input to testssl.sh .

Also it does minor code adjustments to utils/gmap2testssl.sh .

Same as #1938, only for 3.0.
 2021-07-30 14:47:17 +02:00
Dirk Wetter
f4800f8e5e
Merge pull request #1937 from drwetter/fix_1935_3.0 
Fix problem when nmap file has .txt extension (3.0)
 2021-07-25 17:17:39 +02:00
Dirk
29bd7591f9 Supply new converter which matches on ssl and https 
... see #1936.

It is ~ copied from testssl.sh. It adds a detection for the
strings ssl and https. If those run at non-standard ports but nmap
detected it, it'll show up in the output file.
 2021-07-25 16:56:02 +02:00
Dirk
3544014fe3 Fix problem when nmap file has .txt extension (3.0) 
This addresses a bug filed in #1935 in 3.1dev when the supplied file
has a .txt extension. In this scenario the input file was nulled
as from the input file in nmap format an internal input file was
generated which has a .txt extension, in the same directory.
The idea was to persist the file for the user.

Now, this internal input file is ephemeral and only written to $TEMPDIR.
 2021-07-25 16:40:16 +02:00
Dirk Wetter
ca558a9c08
Merge pull request #1922 from drwetter/gha_denylist_3.0 
Github actions modifications (3.0)
 2021-06-19 15:21:04 +02:00
Dirk
6fd4c466e4 Github actions modifications (3.0) 
Same as #1921, only for the stable branch

* define deny list of files when modified not to run GHA
* specitfy OS to be ubuntu-20.04 (is there a debian at all?)
* only use perl 5.26

See #1920
 2021-06-19 12:32:06 +02:00
Dirk Wetter
526bccaa34
Merge pull request #1918 from drwetter/travis2gha_3.0 
Migrate from travis-ci.org to github actions
 2021-06-18 09:56:57 +02:00
Dirk Wetter
7b9a6e334d Migrate from travis-ci.,org to github actions 
Kudos to Mikel, see PR #1909
 2021-06-18 08:39:00 +02:00
Dirk Wetter
f7b29cac99
Merge pull request #1916 from drwetter/fix_1915_3.0 
Fix indentation and redundant message (BREACH) when client certificate required
 2021-06-17 09:29:19 +02:00
Dirk Wetter
19feed169e Fix indentation and redundant message (BREACH) when client certificate required 
... see #1915
 2021-06-17 09:23:34 +02:00
Dirk Wetter
96e8f67999
Merge pull request #1906 from drwetter/tz_fix+3.0 
Display time as suggested in utc (3.0)
 2021-06-03 20:23:20 +02:00
Dirk Wetter
f6a9044315 Display time as suggested in utc (3.0) 
This fixes #1895
 2021-06-03 19:29:26 +02:00
Dirk Wetter
c0d9427988
Merge pull request #1889 from dcooper16/send_to_stderr_30 
Print errors to stderr
 2021-05-15 12:22:43 +02:00
David Cooper
7d5e24c62f
Print errors to stderr 
Same as #1888, but for the 3.0 branch.
 2021-05-13 11:21:48 -04:00
Dirk Wetter
931d0095d6
Merge pull request #1887 from ghen2/3.0-uname 
`hostname` is not defined by POSIX, use portable `uname -n` instead.
 2021-05-13 16:11:11 +02:00
Geert Hendrickx
388f3aea19
hostname is not defined by POSIX, use portable uname -n instead. 2021-05-13 13:58:07 +02:00
Dirk Wetter
6829996197
Merge pull request #1886 from drwetter/3.0.5 
Bump version
 2021-05-10 13:50:07 +02:00
Dirk Wetter
f5fde2a93b Bump version 2021-05-10 12:16:12 +02:00
Dirk Wetter
4976da43b0
Merge pull request #1883 from drwetter/epoch_180hsts_1879.branch_3.0 
Fix "off by one" error in HSTS
 2021-05-10 11:18:53 +02:00
Dirk Wetter
5758c397da
Merge pull request #1885 from definity/3.0 
fixed minor bug with json output for TLS1.1
 2021-05-09 20:37:07 +02:00
Chad Brigance
ca4a0b23f7 fixed minor bug with json output for TLS1.1 #1884 2021-05-09 09:46:57 +00:00
Dirk Wetter
68cbdf8dc8 Fix "off by one" error in HSTS 
There was by mistake a 179 days threshold and also the error message
was wrong when HSTS was exactly set to 179 days, see #1879.

This commit sets it to 180 days and corrects the error messages on
screen.
 2021-05-08 14:55:30 +02:00
Dirk Wetter
835abd6acb
Merge pull request #1870 from dcooper16/fix_ossl30 
Improve compatibility with OpenSSL 3.0
 2021-04-09 10:44:12 +02:00
David Cooper
c0f29f6234
Improve compatibility with OpenSSL 3.0 
This commit makes the same changes to the 3.0 branch as #1868 makes to the 3.1dev branch.
 2021-04-08 12:10:29 -04:00
Dirk Wetter
52ed92ca87
Merge pull request #1866 from drwetter/fix1860_svSE_etc_charset_3.0 
Ensure certain regex patterns work as expected and aren't localized (3.0)
 2021-04-05 14:29:22 +02:00
Dirk
c461702112 Ensure certain regex patterns work as expected and aren't localized (3.0) 
Same as #1865.

This PR is trying to address an issue where probably newer bash versions treat
regexes differently in other locales. W is with a swedish locale just a variant
of V (#1860) see also e.g.

https://collation-charts.org/opensolaris/opensolaris.2008.05.sv_SE.UTF-8.html
https://www.sqlservercentral.com/forums/topic/order-by-name-not-works#post-1644177
 2021-04-05 11:38:17 +02:00
Dirk Wetter
7723a309b5
Merge pull request #1858 from jschauma/3.0 
add codepoints for RFC7905, ChaCha20-Poly1305
 2021-03-25 21:34:04 +01:00
Jan Schaumann
ac71be1040 whitespace alignment 2021-03-25 16:24:52 -04:00
Jan Schaumann
ddb324c81d add codepoints for RFC7905, ChaCha20-Poly1305 2021-03-25 16:21:45 -04:00
Dirk Wetter
acc9a82a07
Merge pull request #1848 from elfranne/ianaopenssl3.0 
IANA <-> Openssl mapping issue for 3.0
 2021-02-25 17:17:39 +01:00
Elfranne
fe6c866d4e
IANA <-> Openssl mapping issue 2021-02-25 13:56:54 +01:00
Dirk Wetter
bf966a9b2f
Merge pull request #1831 from drwetter/fix_heartbleed_json.1828_3.0 
Fix file output formatting for heartbleed (3.0)
 2021-01-20 10:11:51 +01:00
Dirk
a1777cdd0e Fix file output formatting for heartbleed 
Quotes were wrong for different results, which lead to some confusion
for finding, cve and cwe.

Fixes #1828
 2021-01-20 09:04:11 +01:00
Dirk Wetter
2627d9db13
Merge pull request #1825 from drwetter/fix_travis_3.0 
Travis CI didn't run. Trying to fix it (3.0)
 2021-01-18 09:15:14 +01:00
Dirk
4ee936dc52 Travis CI didn't run. Trying to fix it 2021-01-13 22:35:34 +01:00
Dirk Wetter
4b800b0ae5
Merge pull request #1822 from drwetter/fix_dot@NODE 
Fixes trailing dot error in URL handling (3.0)
 2021-01-13 21:56:48 +01:00
Dirk Wetter
b8e76a3861 Fixes trailing dot error in URL handling 
For DNS queries a trailing dot in the variable $NODE is always fine. For
HTTP queries it is not. and causes the https request to fail.

Backport from 4f1da9b192

Also: removal of ancient CVS_REL relict in $TEMPDIR/environment.txt
 2021-01-13 11:35:31 +01:00
Dirk Wetter
666a2c4edb
Merge pull request #1818 from drwetter/le_issuer_fix1816_3.0 
Fix issuer check for Let's Encrypt (3.0)
 2021-01-07 10:32:12 +01:00
Dirk Wetter
0de00f4322 Fix issuer check for Let's Encrypt (3.0) 
Fixes #1816 for 3.0 by a proper halving of the dates
 2021-01-07 10:29:08 +01:00
Dirk Wetter
cb94ffaa13
Merge pull request #1796 from drwetter/no_code_update3.0 
Trying to save resources for Travis/CI (3.0)
 2020-11-28 10:15:13 +01:00
Dirk
98d1bd64bc Trying to save resources for Travis/CI (3.0) 
See 3b38a5dea3
 2020-11-28 10:12:43 +01:00
Dirk Wetter
dc08a120ba
Merge pull request #1793 from drwetter/docker_docu_polish3.0 
Consolidate docker sections in Readme.md and Dockerfile.md (3.0)
 2020-11-27 16:54:26 +01:00
Dirk Wetter
7c835470be Consolidate docker sections in Readme.md and Dockerfile.md 
see #1791
 2020-11-27 16:53:28 +01:00
Dirk Wetter
7dac1a20f7
Merge pull request #1780 from drwetter/fix_1779 
Fix 1779
 2020-11-20 16:27:10 +01:00