Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 05:38:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
5,534 Commits 17 Branches 39 Tags
98bd9d66a4776b59fc28851af71fb8425bd3f690
Commit Graph
5534 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub 98bd9d66a4 Merge pull request #3133 from testssl/socket_timeout_parser 
Fix error which prohibited passing an equal sign after "--socket-timeout"
 2026-09-03 19:07:43 +02:00
Dirk d2df98d03a Fix error which prohibited passing an equal sign after "--socket-timeout" 2026-09-03 18:09:45 +02:00
Dirk WetterandGitHub 9e09f10380 Merge pull request #3131 from testssl/perl_quality 
Add Perl static analysis
 2026-09-01 20:02:32 +02:00
Dirk 8eb05bd862 '$' should be passed to the shell not '\$' 
... thus not double quoting like \\$
 2026-09-01 16:58:14 +02:00
Dirk c312fb8230 Audit all modules 
but let for now exit the check always with zero
 2026-09-01 16:29:16 +02:00
Dirk bd67671fad double quoting needed in passed expression to grep 2026-09-01 16:19:52 +02:00
Dirk 6b1de564d8 Make the flow finally(TM) work 2026-09-01 15:49:31 +02:00
Dirk 4bab452316 Fix syntax error 2026-09-01 15:42:43 +02:00
Dirk 1880a06110 Enable warnings 2026-09-01 15:27:44 +02:00
Dirk 7e1cd8a8c4 Add "use warnings" + correct subroutine prototypes declaration 2026-09-01 15:21:10 +02:00
Dirk 8ab28557a1 Add "use warnings" 2026-09-01 15:18:46 +02:00
Dirk 71322d89cb Squash complains by perlcritic 
and enable warnings
 2026-09-01 15:07:52 +02:00
Dirk Wetter d857e0fe60 Add .perlcritic policy overrides for test suite 2026-08-31 23:26:36 +02:00
Dirk Wetter 23129834b9 Add all other perl modules too 2026-08-31 22:04:07 +02:00
Dirk Wetter a2027d527f fix perttidy and cpan-audit 2026-08-31 20:50:00 +02:00
Dirk Wetter f77dcbefd5 Selfcheck removed 
(not sure whether that was right to try in the first place, probably not)
 2026-08-31 20:35:02 +02:00
Dirk Wetter d58557b430 Newer versions 
- use newer checkout hash
- use appropriate perl version
 2026-08-31 20:30:35 +02:00
Dirk Wetter f5d228e28e Add Perl static analysis 
* Run perl -c on every t/*.t file as a fast pre-check before prove.
* Add Perl::Critic (a curated policy set) and perltidy --check for the Perl test code — the repo lints its bash with shellcheck but has zero linting for its Perl.
* Add Test::NoWarnings (and/or Test::Fatal) to the test harness so warnings/exceptions in the code under test fail the build.

Not yet sure about using the hash / SHA-pinning. To be reconsidered later
 2026-08-31 20:05:30 +02:00
Dirk WetterandGitHub 978c399798 Merge pull request #3126 from ChrisJr404/banner-utc-offset 
Show the UTC offset in the start and done banner
 2026-08-31 11:02:38 +02:00
Chris (ChrisJr404) fa53ee74e4 Normalize the UTC offset in the Start and Done banners in 32_isHTML_valid.t 2026-08-30 19:29:54 -04:00
Dirk WetterandGitHub fef1f43aff Merge pull request #3129 from dcooper16/declare_jsonID 
Declare jsonID
 2026-08-30 21:48:45 +02:00
David CooperandGitHub a9075ef932 Declare jsonID 
As reported in #3128, there are a few instances in which `jsonID` is used, but is not declared as a `local` variable. This commit fixes that problem.

In addition, for consistency, it changes `run_sweet32()` to use `$jsonID` rather than the hard coded string "SWEET32".
 2026-08-30 11:54:16 -07:00
Dirk WetterandGitHub 853850e3f4 Merge pull request #3125 from testssl/CA_store_update_2608 
CA store update 2608
 2026-08-28 10:42:04 +02:00
Dirk Wetter 639f45e8d0 Update 2026/08 2026-08-28 00:59:31 +02:00
Dirk Wetter 296575029d Still MS.pem still contains DST Root CA X3 2026-08-28 00:58:59 +02:00
Chris (ChrisJr404) 28a2c77257 Label the timezone offset in the start and done banner 2026-08-26 11:42:12 -04:00
Chris (ChrisJr404) 978c3964d2 Show the UTC offset in the start and done banner 2026-08-24 17:36:45 -04:00
Dirk Wetter 2571730bb1 2026-08-13 from https://curl.haxx.se/docs/caextract.html 2026-08-24 19:45:28 +02:00
Dirk Wetter f9d6355002 store from jdk-25.0.4.1 
from https://download.oracle.com/java/25/latest/jdk-25_linux-x64_bin.tar.gz
 2026-08-24 19:43:12 +02:00
Dirk Wetter 5461110ac4 store from today via git repo 2026-08-24 19:42:19 +02:00
Dirk Wetter 74bfffecae DL link for JDK, --depth=1 for Apple repo 2026-08-24 19:39:32 +02:00
Dirk WetterandGitHub 6d555cac4e Merge pull request #3118 from testssl/dependabot/github_actions/shogo82148/actions-setup-perl-1.43.1 
Bump shogo82148/actions-setup-perl from 1.42.0 to 1.43.1
 2026-08-24 10:52:03 +02:00
Dirk WetterandGitHub 5894d76a63 Merge pull request #3119 from testssl/dependabot/github_actions/docker/login-action-4.6.0 
Bump docker/login-action from 4.5.2 to 4.6.0
 2026-08-24 10:50:22 +02:00
Dirk WetterandGitHub ff51c14b52 Merge pull request #3123 from dcooper16/cleanup3120 
Cleanup #3120
 2026-08-24 10:49:22 +02:00
David Cooper ac7294182b Cleanup #3120 
This commit cleans up PR #3120. It replaces two long "if" statements with "case" statements and it removes a second declaration of "nr_cert_types" in run_server_defaults().
 2026-08-22 13:30:20 -07:00
Dirk WetterandGitHub 1283aff3d4 Merge pull request #3120 from dcooper16/slhdsa 
Support SLH-DSA server keys
 2026-08-15 16:27:02 +02:00
David b662a0f746 Support SLH-DSA server keys 
This commit adds support for server certificates that have SLH-DSA public keys. The code points come from https://datatracker.ietf.org/doc/draft-reddy-tls-slhdsa/. These code points were added to OpenSSL 4.1.0-dev by https://github.com/openssl/openssl/pull/31248.
 2026-08-14 15:31:33 -07:00
dependabot[bot]andGitHub 876c7f5c77 Bump docker/login-action from 4.5.2 to 4.6.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.5.2...v4.6.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-12 00:23:07 +00:00
dependabot[bot]andGitHub 6653ba7724 Bump shogo82148/actions-setup-perl from 1.42.0 to 1.43.1 
---
updated-dependencies:
- dependency-name: shogo82148/actions-setup-perl
  dependency-version: 1.43.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-12 00:23:00 +00:00
Dirk WetterandGitHub 06adbdccc5 Merge pull request #3115 from testssl/dependabot/github_actions/shogo82148/actions-setup-perl-1.42.0 
Bump shogo82148/actions-setup-perl from 1 to 1.42.0
 2026-08-11 19:20:11 +02:00
Dirk WetterandGitHub e60c4b428f Merge pull request #3114 from testssl/dependabot/github_actions/docker/login-action-4.5.2 
Bump docker/login-action from 4 to 4.5.2
 2026-08-11 19:18:01 +02:00
Dirk WetterandGitHub b578b00440 Merge pull request #3117 from dcooper16/fixtypo 
Fix typo
 2026-08-11 19:13:38 +02:00
David CooperandGitHub 97e6258c85 Fix typo 
It appears that #3084 accidentally introduced a typo in determine_service(). This commit undoes the change.
 2026-08-10 15:44:45 -07:00
dependabot[bot]andGitHub 323141f2ba Bump shogo82148/actions-setup-perl from 1 to 1.42.0 
---
updated-dependencies:
- dependency-name: shogo82148/actions-setup-perl
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-04 00:22:39 +00:00
dependabot[bot]andGitHub 2de44302c3 Bump docker/login-action from 4 to 4.5.2 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4 to 4.5.2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4...v4.5.2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-31 00:22:33 +00:00
Dirk WetterandGitHub 5296954a70 Merge pull request #3108 from testssl/fix_3107_fname-warning 
Remove warning message when supplying a fname
 2026-07-16 14:00:04 +02:00
Dirk WetterandGitHub 18e6938b62 Merge pull request #3110 from petecooper/3.3dev 
Remove broken link to privacyscore.org in `3.3dev`
 2026-07-16 13:57:43 +02:00
Pete Cooper 6fdfbc1800 remove broken link to privacyscore.org 
ping https://github.com/testssl/testssl.sh/issues/3109
 2026-07-16 12:37:27 +01:00
Dirk Wetter 498a0dff33 Remove warning message when supplying a fname 
In order ot waran early in file outputs 75376d3 introduced a separate function for checking early
the command line.

As massing scanning option was not considered one got a warning, saying

   Warning: Target is not a server name: results may be completely wrong, at minimum trust may show false results.

This fixes that, see #3107 .
 2026-07-16 11:25:30 +02:00
Dirk WetterandGitHub 2b6180320c Merge pull request #3104 from ericcgu/feat/3097-short-lived-certs 
Improve handling of short-lived certificates (#3097)
 2026-07-15 17:13:21 +02:00