Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,317 Commits 16 Branches 39 Tags
aac696b0a01e9fbdfa024f93bdbd96d6f5ce5c56
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk Wetter aac696b0a0 Updated root CA stores 2023-03-17 18:06:57 +01:00
Dirk Wetter 6106887fdd Update DST CA 2023-03-17 18:06:03 +01:00
Dirk Wetter 419aae3c98 updates docu to reflekt actual status 2023-03-17 18:05:24 +01:00
Dirk WetterandGitHub 2659a13086 Merge pull request #2336 from drwetter/drwetter-patch-4 
Update codespell.yml
 2023-03-12 18:12:29 +01:00
Dirk WetterandGitHub 6cea273a68 Update codespell.yml 
add exception for aNULL which should work now
 2023-03-12 17:55:10 +01:00
Dirk WetterandGitHub b84e182ca2 Merge pull request #2332 from drwetter/sanitize_fileout 
Make sure control chars from HTTP header don't end up in html,csv,json
 2023-03-12 16:18:20 +01:00
Dirk WetterandGitHub 83f67b4fb7 Merge pull request #2333 from drwetter/drwetter-patch-4 
Update .gitignore
 2023-03-12 16:00:11 +01:00
Dirk WetterandGitHub 8643ed4c72 Update .gitignore 2023-03-12 15:57:01 +01:00
Dirk Wetter cacd8c57b1 Add variable htmlfile + filter GOST message 
... which is needed for newer LibreSSL/OpenSSL versions
 2023-03-12 15:09:24 +01:00
Dirk Wetter 2e33c483dd remove comma in tr as it was interpreted as such 2023-03-12 14:52:11 +01:00
Dirk Wetter fab67d0cca Remove CR in server banner 
... which caused a problem in t/32_isHTML_valid.t.

Also the test for an empty server banner was simplified
 2023-03-12 14:00:55 +01:00
Dirk Wetter d298b41d2c add aNULL exception to codespell 2023-03-11 14:06:47 +01:00
Dirk Wetter 06506b371e Make sure control chars from HTTP header don't end up in html,csv,json 
This addresses the bug #2330 by implementing a function which removes
control characters from the file output format html,csv,json at the
output.

In every instance called there's a check before whether the string
contains control chars, hoping it'll save a few milli seconds.

A tr function is used, omitting LF.

It doesn't filter the terminal output and the log file output.
 2023-03-11 13:38:28 +01:00
Dirk WetterandGitHub 88763f47a8 Merge pull request #2326 from drwetter/fix_mime-type 
Fix Accept Header
 2023-02-20 20:29:14 +01:00
Dirk a14fc5bdcf Fix Accept header 
see #2325.

"whenever HTTP/1.1 is used then the Accept header uses "text/*" as a MIME type.
This causes some minor issues with some of the checks we are doing"
 2023-02-20 15:01:40 +01:00
Dirk WetterandGitHub e57527f3ec Merge pull request #2321 from drwetter/align_json+terminal@run_cipherlists 
Rename 3 jsonIDs in run_cipherlists(): breaking change
 2023-02-08 17:07:42 +01:00
Dirk WetterandGitHub 8260ca16e2 Merge pull request #2309 from polarathene/chore/dockerfile-improved-copy 
chore: Use a single `COPY` by better leveraging `.dockerignore` patterns
 2023-02-07 12:23:04 +01:00
Dirk WetterandGitHub 363c0d0a69 Merge pull request #2323 from drwetter/drwetter-patch-4 
Remove mkdir in Dockerfile
 2023-02-07 10:29:08 +01:00
Dirk WetterandGitHub f914423978 Remove mkdir in Dockerfile 
see https://github.com/drwetter/testssl.sh/pull/2312#pullrequestreview-1286620850
 2023-02-07 10:28:26 +01:00
Dirk WetterandGitHub 1ee21b7f22 Merge pull request #2312 from polarathene/chore/dockerfile-simplify-user 
chore(Dockerfile): Simplify `testssl` user creation
 2023-02-07 09:03:23 +01:00
Dirk WetterandGitHub 64ae161218 Merge branch '3.1dev' into chore/dockerfile-simplify-user 2023-02-07 09:03:15 +01:00
Dirk Wetter 66ebfb2f58 Add changes to CSV baseline 2023-02-06 21:56:54 +01:00
Dirk Wetter 6f881dc70b Rename 3 jsonIDs in run_cipherlists(): breaking change 
see #2316 / #2320

AVERAGE --> OBSOLETED
GOOD    --> STRONG_NOFS
STRONG  --> STRONG_FS
 2023-02-05 19:32:08 +01:00
Dirk WetterandGitHub e87b745c93 Merge pull request #2316 from dcooper16/cipherlists_doc 
Update documentation for cipherlists tests
 2023-02-05 19:25:02 +01:00
Dirk WetterandGitHub 05b4cdcc0d Merge pull request #2317 from dcooper16/fix_html 
Fix HTML output in Bash 5.2 and newer
 2023-02-04 09:22:03 +01:00
Dirk WetterandGitHub 70237b2328 Merge pull request #2313 from polarathene/chore/dockerfile-remove-mkdir 
chore: Remove redundant `mkdir`
 2023-02-03 19:54:51 +01:00
Dirk WetterandGitHub 6c2663aeb6 Merge pull request #2311 from SSLbrain/3.1dev 
Feature Trustcor certificates being removed/disabled from root stores #2293
 2023-02-02 13:55:07 +01:00
Dirk WetterandGitHub e02e8be19f Merge pull request #2306 from drwetter/upgrade_alpine_perf-fix 
Upgrade Alpine version for both Dockerfiles
 2023-02-01 19:45:57 +01:00
Dirk Wetter beb94d9efc Upgrade Alpine version for both Dockerfiles 
... to improve/mitigate performance problems, see #2299.
(musl libc vs. glibc)
 2023-02-01 19:40:40 +01:00
Dirk WetterandGitHub 5a1a114adc Merge pull request #2300 from drwetter/dependabot/github_actions/docker/build-push-action-4.0.0 
Bump docker/build-push-action from 3.3.0 to 4.0.0
 2023-01-31 09:37:28 +01:00
Dirk WetterandGitHub 0b5c414970 Merge pull request #2303 from drwetter/nntp_ci_remove 
Remove NNTP from CI tests
 2023-01-31 09:37:06 +01:00
Dirk Wetter 2e0898c9ef Remove NNTP from CI tests 
Maybe for the future we should check whether host is available and
if so then run the test
 2023-01-31 09:34:18 +01:00
Dirk WetterandGitHub 8099dc0106 Merge pull request #2297 from drwetter/ldap_starttls_improvements 
Add logic for STARTTLS enabled AD servers
 2023-01-17 14:27:01 +01:00
Dirk Wetter fdd72d2785 Cleanup code, clarfy comments for AD/LDAP + STARTTLS 2023-01-17 14:23:53 +01:00
Dirk Wetter fc2a020294 Add logic for STARTTLS enabled AD servers 
There are two different scenarios. x0C is the buffsize reply from openldap-like servers
whereas AD servers probably have x84 and return also the OID. The following is kind of
hackish as ldap_ExtendedResponse_parse() in apps/s_client.c of openssl is kind of hard
to understand. It was deducted from a number of hosts.
Bottom line: We'll look at the 9th byte or at the 17th when retrieving the result code

AD:
30 84 00 00 00 7d 02 01 01 78 84 00 00 00 74 0a 01 34 04 00 04 55 30 30 30 30 30 30 30 30 3a 20 [ failed AD .. LdapErr + OID..]
30 84 00 00 00 28 02 01 01 78 84 00 00 00 1F 0A 01 00 04 00 04 00 8A 16 [.. OID ..]
   ^^ bufflen                                      ^^ resultcode

30 0C 02 01 01 78 07 0A 01 00 04 00 04 00
   ^^ bufflen              ^^ result code
 2023-01-17 11:16:05 +01:00
Dirk WetterandGitHub ce3bd4764f Merge pull request #2296 from drwetter/dependabot/github_actions/docker/build-push-action-3.3.0 
Bump docker/build-push-action from 3.2.0 to 3.3.0
 2023-01-16 10:20:13 +01:00
Dirk WetterandGitHub 7670275e59 Merge pull request #2292 from drwetter/ldap_starttls_improvements 
make starttls_ldap_dialog() more readable...
 2022-12-27 22:06:12 +01:00
Dirk Wetter c67cefaf8e add info about error handling 2022-12-26 19:15:49 +01:00
Dirk Wetter 336d3c947a better use safe_echo() 2022-12-26 16:14:26 +01:00
Dirk Wetter b633efae69 make starttls_ldap_dialog() more readable... 
... add references + better debugging output
 2022-12-26 16:10:31 +01:00
Dirk WetterandGitHub 198bb09d51 Merge pull request #2282 from drwetter/drwetter-patch-2 
Reflect past update for docker hub's Dockerfile
 2022-11-28 17:09:04 +01:00
Dirk WetterandGitHub 0c807bea5b Reflect past update for docker hub's Dockerfile 
... using alpine 3.16
 2022-11-28 14:10:13 +01:00
Dirk WetterandGitHub 9304bb80b8 Merge pull request #2281 from dcooper16/fix_whitespace 
Fix whitespace issues
 2022-11-25 18:23:58 +01:00
Dirk WetterandGitHub 6ba21a937a Merge pull request #2278 from dcooper16/fix_extract_calist 
Fix extract_calist()
 2022-11-24 11:15:10 +01:00
Dirk WetterandGitHub a4666087e8 Merge pull request #2265 from dcooper16/server_sig_algs 
Show server supported signature algorithms
 2022-11-23 11:11:02 +01:00
Dirk WetterandGitHub 462a602625 Merge pull request #2276 from dcooper16/pem_fileout 
Fix #1747
 2022-11-18 11:06:26 +01:00
Dirk WetterandGitHub 827782cd58 Merge pull request #2275 from drwetter/remove_negotiated 
Remove Negotiated cipher / protocol in server preferences
 2022-11-15 09:28:38 +01:00
Dirk Wetter e918a2c31f remove negotiated cipher / protocol also in baseline file 2022-11-14 20:25:56 +01:00
Dirk Wetter 1842b9eefb Remove Negotiated cipher / protocol in server preferences 
As a first cleanup action I removed in run_server_preference()
the line with Negotiated Protocol and Negotiated Cipher as
the don't have any real information, see #2235 , comment below:
https://github.com/drwetter/testssl.sh/pull/2235
 2022-11-14 17:23:13 +01:00
Dirk WetterandGitHub 0dac50c830 Merge pull request #2272 from dcooper16/fix2271 
Fix #2271
 2022-11-11 16:27:18 +01:00
Dirk WetterandGitHub 92a80f7f86 Merge pull request #2268 from drwetter/mastodon 
Hint for mastodon
 2022-11-10 15:11:41 +01:00
Dirk WetterandGitHub c403249678 Hint for mastodon 
... and to a separate account
 2022-11-10 15:09:03 +01:00
Dirk WetterandGitHub 6716dc7465 Merge pull request #2261 from osown/3.1dev 
if PROXY variable is set there is no need to do a direct connection attempt
 2022-11-10 10:52:14 +01:00
Dirk WetterandGitHub 2b0fdfdf64 Merge pull request #2262 from dcooper16/run_fs_infnite_loop 
Fix infinite loop in run_fs()
 2022-11-10 09:43:29 +01:00
Dirk WetterandGitHub a4419fa9c9 Merge pull request #2264 from dcooper16/padding 
Clean up adding padding
 2022-11-10 09:37:42 +01:00
Dirk WetterandGitHub dda579cdf2 Merge pull request #2266 from dcooper16/fix2249 
Fix #2249
 2022-11-10 09:22:35 +01:00
Dirk WetterandGitHub f5d41ff26f Merge pull request #2258 from drwetter/minor 
Fix indentation + clarify openssl warning
 2022-10-21 15:44:55 +02:00
Dirk WetterandGitHub 7c38cc7290 Merge pull request #2235 from dcooper16/fix1311 
Fix #1311
 2022-10-21 15:41:24 +02:00
Dirk 55558b86d8 Fix indentation + clarify openssl warning 2022-10-20 14:55:22 +02:00
Dirk WetterandGitHub 8d9b11be40 Merge pull request #2257 from drwetter/drwetter-patch-1 
Fix typo
 2022-10-19 14:09:48 +02:00
Dirk WetterandGitHub ea67c4f4a8 Fix typo 
See #2256
 2022-10-19 14:06:26 +02:00
Dirk WetterandGitHub 73fa3e5aef Merge pull request #2251 from drwetter/dependabot/github_actions/docker/setup-qemu-action-2.1.0 
Bump docker/setup-qemu-action from 2.0.0 to 2.1.0
 2022-10-13 09:37:40 +02:00
Dirk WetterandGitHub f823c0528e Merge pull request #2252 from drwetter/dependabot/github_actions/docker/build-push-action-3.2.0 
Bump docker/build-push-action from 3.1.1 to 3.2.0
 2022-10-13 09:37:23 +02:00
Dirk WetterandGitHub fa412b1a33 Merge pull request #2250 from drwetter/dependabot/github_actions/docker/login-action-2.1.0 
Bump docker/login-action from 2.0.0 to 2.1.0
 2022-10-13 09:37:06 +02:00
Dirk WetterandGitHub 0ed2bf0ada Merge pull request #2234 from cancom/fix/grade-cap-sorting 
Fix grade cap reasons not showing weak public keys
 2022-10-07 16:48:06 +02:00
Dirk WetterandGitHub 09a479cb7a Merge pull request #2238 from dcooper16/SC2235 
Fix Shellcheck SC2235
 2022-10-07 16:24:04 +02:00
Dirk WetterandGitHub b03d8ca1e3 Merge pull request #2248 from war59312/patch-1 
Readme.md - Small Fixes To Docs Section
 2022-09-29 19:16:25 +02:00
Dirk WetterandGitHub c487f911aa Merge pull request #2247 from drwetter/bump_version_rc 
Bump rc version
 2022-09-28 17:17:52 +02:00
Dirk Wetter 77a2d891cf Bump rc version 
... so that distributors feel more encouraged to switch to this version
and drop 3.0.x
 2022-09-28 09:21:25 +02:00
Dirk WetterandGitHub 33376cca8c Merge pull request #2244 from drwetter/grep_quotes 
Squashed some double quotes for grep expressions
 2022-09-18 21:50:30 +02:00
Dirk Wetter 8c14a42180 Squashed some double quotes for grep expressions 
... in favor of single quotes
 2022-09-18 19:27:36 +02:00
Dirk WetterandGitHub 0e61b72197 Merge pull request #2242 from ghen2/grep-3.8 
Fix grep 3.8 warnings on unneeded escapes of hyphen, slash, space.
 2022-09-18 17:38:11 +02:00
Dirk WetterandGitHub 03b3ba8078 Merge pull request #2239 from dcooper16/neat_list_alignment 
Fix alignment in neat_list()
 2022-09-16 09:14:51 +02:00
Dirk WetterandGitHub de48956639 Merge pull request #2237 from a1346054/which 
Use bash-builtin `command -v` instead of external `which`
 2022-09-14 21:25:14 +02:00
Dirk WetterandGitHub 1193d89344 Merge pull request #2236 from a1346054/fixes 
Use `grep -E` instead of `egrep`
 2022-09-14 21:19:47 +02:00
Dirk WetterandGitHub b3c49b584d Merge pull request #2227 from dcooper16/fix_data_after_finished 
Fix decrypting TLS 1.3 server response
 2022-09-07 10:11:39 +02:00
Dirk WetterandGitHub 34f7b4d8a3 Merge pull request #2229 from cancom/feat/overall_grade 
Consistent overall_grade output
 2022-09-07 10:10:12 +02:00
Dirk WetterandGitHub 7e885b4b95 Merge pull request #2225 from dcooper16/fix_determine_cert_compression 
Fix determine_cert_compression() and certificate_transparency()
 2022-09-07 10:08:25 +02:00
Dirk WetterandGitHub 814bc8b6f5 Merge pull request #2223 from drwetter/new_binaries 
New openssl binaries
 2022-09-05 14:59:41 +02:00
Dirk d7b5abe8c1 Add Darwin binary from #2224 2022-09-05 14:57:16 +02:00
Dirk 48c7e2d25c New FreeBSD x64 binary 2022-09-01 19:26:10 +02:00
Dirk e285b48fd0 New Linux 32 binary 2022-09-01 19:20:41 +02:00
Dirk 8ab3aba818 Correct link 2022-09-01 19:06:30 +02:00
Dirk 7016c4a815 Add newer Linux 64 bit binaries 
* supporting xmpp-server, see #1575, #1589
* address security bug, see #2179
 2022-09-01 17:22:28 +02:00
Dirk f36e2afa5e Review text, renew some paragraphs 2022-09-01 17:21:00 +02:00
Dirk WetterandGitHub 5442981b63 Merge pull request #2222 from drwetter/fix_xmppserver_detection 
Fix xmpp-server detection
 2022-08-31 17:21:59 +02:00
Dirk Wetter 2071feafe3 Fix xmpp-server detection 
See #1575
 2022-08-31 09:09:05 +02:00
Dirk WetterandGitHub 0b29be2444 Merge pull request #2220 from ghen2/lmtp 
Send a proper LHLO command with argument (like EHLO), to fix -t lmtp.
 2022-08-28 20:10:01 +02:00
Dirk WetterandGitHub b577234e6d Merge pull request #2217 from drwetter/3.2rc1 
Bump version 3.1dev to first release candidate
 2022-08-22 20:27:03 +02:00
Dirk dd01effcfb Bump version to first release candidate 2022-08-22 16:49:06 +02:00
Dirk WetterandGitHub 33f28f881b Merge pull request #2215 from drwetter/alpine3.16-dockerfile 
Upgrade Alpine version to the latest stable
 2022-08-22 16:37:43 +02:00
Dirk WetterandGitHub abb8f82d85 Upgrade Alpine version to the latest stable 
3.16.
 2022-08-22 16:31:59 +02:00
Dirk WetterandGitHub 3ac6bd9335 Merge pull request #2210 from dcooper16/fix_cipher_grading 
Fix cipher grading
 2022-08-22 12:09:20 +02:00
Dirk WetterandGitHub 85a30a6ded Merge pull request #2214 from drwetter/minor_typo 
Fix typo...
 2022-08-22 11:56:59 +02:00
Dirk WetterandGitHub 349486fb39 Merge pull request #2211 from dcooper16/fix2198 
Fix #2198
 2022-08-22 11:55:33 +02:00
Dirk Wetter ad644e1cec Fix typo... 
Thanks to codespell
 2022-08-22 08:49:04 +02:00
Dirk WetterandGitHub 79a4de0513 Merge pull request #2212 from drwetter/dependabot/github_actions/docker/build-push-action-3.1.1 
Bump docker/build-push-action from 3.1.0 to 3.1.1
 2022-08-21 13:23:53 +02:00
Dirk WetterandGitHub 730c758488 Merge pull request #2206 from drwetter/update_bug_report 
Update bug_report.md
 2022-08-02 13:28:56 +02:00
Dirk WetterandGitHub 8e6aa10e22 Merge pull request #2209 from drwetter/drwetter-patch-1 
Update feature_request.md
 2022-08-02 13:28:31 +02:00
Dirk WetterandGitHub 78423d3e7d Update feature_request.md 2022-08-02 13:18:49 +02:00