Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,479 Commits 16 Branches 39 Tags
ad04a90b2a977e234644c5a6cb1ee3581bfbe09e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub ad04a90b2a Merge pull request #2459 from Tazmaniac/client-renego-fix 
Secure Client-Initiated Renegotiation : fixes/enhancements
 2024-01-18 18:37:58 +01:00
Dirk WetterandGitHub b6fdfb1986 Merge pull request #2458 from drwetter/drwetter-patch-1 
Create pull_request_template.md
 2024-01-10 19:28:22 +01:00
Dirk WetterandGitHub 6e84f5f139 Fill pull_request_template.md 2024-01-10 19:27:24 +01:00
Dirk WetterandGitHub 9a494b135c Create pull_request_template.md 2024-01-10 19:03:23 +01:00
Dirk WetterandGitHub 7c0c06641c Merge pull request #2437 from drwetter/disclaimer 
Disclaimer
 2024-01-10 12:22:34 +01:00
Dirk WetterandGitHub 810e870d16 Merge pull request #2454 from Odinmylord/3.2 
Make cert_keysize output consistent
 2024-01-10 12:21:42 +01:00
Dirk WetterandGitHub 69664cbabf Merge pull request #2455 from Odinmylord/fix_intermediate_cert 
add utf8 support to intermediate cert names
 2024-01-06 20:38:32 +01:00
Dirk WetterandGitHub 3f9cc7b6a5 Merge pull request #1871 from dcooper16/quit_on_cmd_line_errors 
Quit testssl.sh on all command line errors
 2023-12-24 15:34:00 +01:00
Dirk WetterandGitHub bbf770ac7f Merge pull request #2447 from Odinmylord/3.2 
Add Brainpool signature algorithms to output
 2023-12-24 14:00:42 +01:00
Dirk 23c2b24c3d MUST update hashes 2023-12-24 14:00:34 +01:00
Dirk WetterandGitHub 3d63b62c24 Merge pull request #2450 from drwetter/fix_stupid_umaskerror 
Bail out if user error bc of umask
 2023-12-23 15:02:20 +01:00
Dirk Wetter c5265e33b7 fix wrong temp file var 2023-12-23 13:13:16 +01:00
Dirk Wetter 3b5f2022b3 fix typo 2023-12-23 13:03:57 +01:00
Dirk Wetter 8e517e0a70 Bail out if user error bc of umask 
If a user chose a broken umask testssl.sh will start but emits
subsequent errors.

This patch adds two sanity checks whether it is allowed to create
and read files in the temp directory.

Fixes #2449
 2023-12-23 12:58:05 +01:00
Dirk WetterandGitHub 7829821010 Merge pull request #2441 from drwetter/dependabot/github_actions/docker/build-push-action-5.1.0 
Bump docker/build-push-action from 5.0.0 to 5.1.0
 2023-12-09 18:13:24 +01:00
Dirk WetterandGitHub 1a9a486474 Merge pull request #2438 from drwetter/wildcard 
Implement warning for wildcard match
 2023-11-10 19:41:08 +01:00
Dirk 81ba1fe818 Implement warning for wildcard match 
fixes #2122
 2023-11-10 15:37:13 +01:00
Dirk WetterandGitHub 654086782b wording, typos 2023-11-06 14:40:52 +01:00
Dirk WetterandGitHub b87634baa0 Disclaimer 2023-11-06 14:34:55 +01:00
Dirk WetterandGitHub f59f3bd64b Merge pull request #2436 from drwetter/fix_ProxyVar 
Fix output: PROXY string vs $PROXY variable
 2023-10-31 20:36:32 +01:00
Dirk cbb32d375b Fix output: PROXY string vs $PROXY variable 
See also #2428.
 2023-10-30 21:39:30 +01:00
Dirk WetterandGitHub a6f97454a4 Merge pull request #2425 from drwetter/drwetter-patch-1 
Use Alpine 3.18
 2023-10-30 17:53:57 +01:00
Dirk WetterandGitHub 0a8dd6827a Merge pull request #2433 from drwetter/fix_2429 
Fix weird bash globbing #2429
 2023-10-30 17:53:32 +01:00
Dirk a9103fdfee Put the redirection into the right spot 2023-10-30 15:27:37 +01:00
Dirk 92b28c5f1c Fix weird bash globbing #2429 
What was problematic was the error message when the certificate
stores were missing. This fixes it by redirecting the error
message to /dev/null so that if the sub function detects the missing
file it returns with an error by the program and not by executing
"basename"
 2023-10-30 15:11:10 +01:00
Dirk WetterandGitHub 40be025454 Use Alpine 3.18 
.. to at least be on par with 3.0
 2023-10-13 17:36:19 +02:00
Dirk WetterandGitHub f3c7eb4333 Merge pull request #2424 from drwetter/fix_utilLinux_Dockerfile 
Make sure util_Linux gets replaced as intended
 2023-10-13 17:33:25 +02:00
Dirk WetterandGitHub 781757f086 polish phrasing 2023-10-13 17:32:35 +02:00
Dirk f39564d843 Make sure util_Linux gets replaced as intended 
There were some discussions in #2420 whether the zypper install
commend worked as intended. While there's liitle doubt that those
packages weren't installed this PR makes really sure that this is the case.

Also it does an update via ``zypper up`` as the image provided from
dockerhub seemed to be somewhat behind.
 2023-10-13 17:07:38 +02:00
Dirk WetterandGitHub 6431104d3e Merge pull request #2423 from drwetter/update_container_leap15.5 
Upgrade to leap 15.5
 2023-10-13 10:41:58 +02:00
Dirk dda89c629e Upgrade to leap 15.5 2023-10-13 10:36:05 +02:00
Dirk b21c5ee780 Add IP protocol to debug msg 2023-10-11 15:22:46 +02:00
Dirk WetterandGitHub f50a958fa9 Merge pull request #2417 from vsbs-david/local_hostname_drill 
Added drill command to get_a[aaa]_record() for local hostname
 2023-10-11 15:19:44 +02:00
Dirk WetterandGitHub 30e0c8418a Merge pull request #2298 from drwetter/changelog_3.2 
Start listing changes and contributions for 3.2
 2023-10-10 11:53:26 +02:00
Dirk Wetter 2b2e36352c Merge branch '3.2' into changelog_3.2 2023-10-10 11:32:12 +02:00
Dirk Wetter b0d035cbf4 went though the log from today back to Nov 22 2023-10-10 11:13:44 +02:00
Dirk WetterandGitHub 4e574d6540 Merge pull request #2416 from drwetter/prepare4release 
Bump version number
 2023-10-10 10:29:03 +02:00
Dirk Wetter bdeda3ab1c Bump version number 2023-10-09 22:51:44 +02:00
Dirk WetterandGitHub 4c6e8d79ed Merge pull request #2414 from drwetter/update_certstore 
Update of certificate stores
 2023-10-09 22:20:42 +02:00
Dirk db175a8d51 Update of certificate stores 
Mozilla: 2023-08-22
Debian 10
JDK 22
Windows 10 22H2, Patched until 2023-10
Apple: 2023-10
 2023-10-09 22:08:48 +02:00
Dirk WetterandGitHub 8f295cb090 Merge pull request #2411 from ghen2/servicedetection 
Improve detection for POP3, IMAP and SMTP services.
 2023-10-07 15:09:11 +02:00
Dirk WetterandGitHub 2d8fbe2302 Merge pull request #2409 from drwetter/deprecate_sslnative 
Deprecate --ssl-native
 2023-10-07 10:44:52 +02:00
Dirk Wetter f0e1540bc6 add comment wrt #2403 2023-10-03 18:09:58 +02:00
Dirk Wetter 65da627820 better English 2023-10-03 15:56:18 +02:00
Dirk Wetter d46301e9f7 Deprecate --ssl-native 2023-10-03 15:51:58 +02:00
Dirk WetterandGitHub 96d82e2dff Merge pull request #2407 from drwetter/fix_2403_Dockerfile_tar 
add busybox link to tar
 2023-10-03 15:17:05 +02:00
Dirk Wetter 39217ebe87 fix file instead of word 2023-10-03 15:14:19 +02:00
Dirk Wetter dc8721ca20 fix spellcheck issues 2023-10-03 15:14:19 +02:00
Dirk WetterandGitHub 4c90cf6d8b Merge pull request #2408 from drwetter/fix_spelleckissues 
fix spellcheck issues
 2023-10-03 15:12:44 +02:00
Dirk Wetter 63cc603c92 fix file instead of word 2023-10-03 15:10:00 +02:00
Dirk Wetter 2acffa5a3f fix spellcheck issues 2023-10-03 15:06:46 +02:00
Dirk Wetter 8a1e90767b add busybox link to tar 
See #2403
 2023-10-03 15:00:04 +02:00
Dirk WetterandGitHub 7a60251ff9 Merge pull request #2400 from dekkers/doc-server-preferences 
Add --server-preference alias to documentation
 2023-09-21 20:57:20 +02:00
Dirk WetterandGitHub 8e51a5c3d7 Merge pull request #2398 from drwetter/dependabot/github_actions/docker/setup-buildx-action-3 
Bump docker/setup-buildx-action from 2 to 3
 2023-09-13 10:31:30 +02:00
Dirk WetterandGitHub 44428af875 Merge pull request #2397 from drwetter/dependabot/github_actions/docker/login-action-3.0.0 
Bump docker/login-action from 2.2.0 to 3.0.0
 2023-09-13 10:31:02 +02:00
Dirk WetterandGitHub 2e549c1b7d Merge pull request #2396 from drwetter/dependabot/github_actions/docker/metadata-action-5 
Bump docker/metadata-action from 4 to 5
 2023-09-13 10:30:42 +02:00
Dirk WetterandGitHub 1d626afabe Merge pull request #2395 from drwetter/dependabot/github_actions/docker/build-push-action-5.0.0 
Bump docker/build-push-action from 4.2.1 to 5.0.0
 2023-09-13 10:30:19 +02:00
Dirk WetterandGitHub 13256e1e65 Merge pull request #2394 from drwetter/dependabot/github_actions/docker/setup-qemu-action-3.0.0 
Bump docker/setup-qemu-action from 2.2.0 to 3.0.0
 2023-09-13 10:29:58 +02:00
Dirk WetterandGitHub b7230d4b5d Merge pull request #2392 from drwetter/dependabot/github_actions/docker/build-push-action-4.2.1 
Bump docker/build-push-action from 4.1.1 to 4.2.1
 2023-09-11 10:21:22 +02:00
Dirk WetterandGitHub 0791efbbda Merge pull request #2390 from dcooper16/no_tls1 
Support OpenSSL with no TLSv1
 2023-09-08 11:24:00 +02:00
Dirk WetterandGitHub eaf6e40463 Merge pull request #2388 from drwetter/dependabot/github_actions/actions/checkout-4 
Bump actions/checkout from 3 to 4
 2023-09-05 13:55:33 +02:00
Dirk WetterandGitHub 765b5855cc Merge pull request #2386 from drwetter/strict_parsing_HSTS 
Strict parser for HSTS
 2023-08-28 19:55:57 +02:00
Dirk 01ab3acde5 Strict parser for HSTS 
As suggested in #2381 this parses strictly the value for mag-age
in the HSTS header line. While it is implemented only in run_hsts()
it could be extracted to a separate functioni in the future and used
elsewhere too.

The improvement is more strict and catches e.g. '==' signs and issues
a warning. See https://www.rfc-editor.org/rfc/rfc6797#section-6.1.1 .

Also it is picky regarding quotes now which are only allowed enclosing
the value.
 2023-08-28 18:33:41 +02:00
Dirk WetterandGitHub c55207d45c Merge pull request #2385 from drwetter/hide_fast 
Hide --fast option in help() and issue a warning when it's used
 2023-08-28 18:26:36 +02:00
Dirk WetterandGitHub fc0aeaafcd Merge pull request #2384 from drwetter/OPENSSL2_HAS_TLS_1_3 
Introducing variable OPENSSL2_HAS_TLS_1_3
 2023-08-28 18:26:20 +02:00
Dirk 0fcddff1cd Warn when using --fast 
... in the terminal only for now.
 2023-08-28 16:08:04 +02:00
Dirk d19675136a Deprecating $FAST / --fast 
As this option shows inconsistencies / wrong results and a fix would require
too much work at this moment this option is being hidden from the help. It
wasn't in the ~/doc .

See #849 , #2382, #1732 etc.
 2023-08-28 15:53:02 +02:00
Dirk 79577a84eb Introducing variable OPENSSL2_HAS_TLS_1_3 
If we run with supplied binary AND /usr/bin/openssl supports TLS 1.3
we now have a variable OPENSSL2_HAS_TLS_1_3 which is set to true.

It can be used for subsequent changes where we need TLS 1.3 for or
where it would be better to use TLS 1.3.
 2023-08-28 15:42:17 +02:00
Dirk WetterandGitHub 1e7219f344 Merge pull request #2383 from ghen2/grep-3.8 
Fix another grep-3.8 warning on needlessly escaped exclamation mark.
 2023-08-28 14:38:18 +02:00
Dirk WetterandGitHub 27c77071eb Merge pull request #2380 from WtfJoke/removeOutdatedDockerImageRefere 
Remove reference to outdated docker image
 2023-08-12 13:12:35 +02:00
Dirk WetterandGitHub c888475b2c Merge pull request #2377 from drwetter/3.1dev_to_3.2_references 
change references from 3.1dev to 3.2
 2023-07-31 17:15:15 +02:00
Dirk 2067ac8123 Fall back to heise.de 
.. to scan.

It worked in a few examples locally. Other hosts I tried so far weren't
available anymore (like scanme.nmap.org). In order to reduce the burden
we scan now only during PRs.
 2023-07-31 16:34:56 +02:00
Dirk 15b7f7b403 Stop using deprecated OS 2023-07-31 14:03:57 +02:00
Dirk fc14a02035 Changed heise.de to example.com as sometimes we're blocked 2023-07-31 13:44:35 +02:00
Dirk 9e76b1e9ce Change content here too 2023-07-31 12:51:29 +02:00
Dirk 6669af2fc5 remove this one (3.2 see previous commit) 2023-07-31 12:46:50 +02:00
Dirk 5246194bee further files which contained 3.1dev 2023-07-31 12:46:04 +02:00
Dirk b6143e1fb9 Change references from 3.1dev to 3.2 2023-07-31 12:40:56 +02:00
Dirk WetterandGitHub 3c0ae4663f Merge pull request #2375 from dcooper16/line_endings 
Fix line endings in etc/curves-mapping.txt
 2023-07-03 19:56:22 +02:00
Dirk WetterandGitHub 3a80a13d66 Merge pull request #2372 from drwetter/dependabot/github_actions/docker/build-push-action-4.1.1 
Bump docker/build-push-action from 4.1.0 to 4.1.1
 2023-06-15 13:27:40 +02:00
Dirk WetterandGitHub 864877df0e Merge pull request #2370 from drwetter/dependabot/github_actions/docker/setup-qemu-action-2.2.0 
Bump docker/setup-qemu-action from 2.1.0 to 2.2.0
 2023-06-12 10:20:44 +02:00
Dirk WetterandGitHub 69549d815f Merge pull request #2369 from drwetter/dependabot/github_actions/docker/login-action-2.2.0 
Bump docker/login-action from 2.1.0 to 2.2.0
 2023-06-12 10:20:21 +02:00
Dirk WetterandGitHub 35590baa5a Merge pull request #2371 from drwetter/dependabot/github_actions/docker/build-push-action-4.1.0 
Bump docker/build-push-action from 4.0.0 to 4.1.0
 2023-06-12 10:19:54 +02:00
Dirk WetterandGitHub 7f49af1100 Merge pull request #2367 from drwetter/Improve_ServerHello_ErrorMessage 
Make clear where the parsing error comes from: SSL or TLS
 2023-06-05 12:45:28 +02:00
Dirk 858f00304c tiny clarification in debug mode 2023-06-02 16:57:47 +02:00
Dirk 6e2b9ae1c6 Make clear where the parsing error comes from: SSL or TLS 2023-06-02 16:43:27 +02:00
Dirk WetterandGitHub 00b510d08c Merge pull request #2364 from drwetter/lineending_lf 
try to fix the line ending problem using .gitattributes .
 2023-05-23 18:39:29 +02:00
Dirk WetterandGitHub 947b2565e6 Merge pull request #2363 from teki69/patch-1 
Fix CRL conversion issue when already in PEM format
 2023-05-23 18:38:46 +02:00
Dirk 33211c0cf1 add file types to be interpreted w lf line endings 2023-05-23 16:18:42 +02:00
Dirk e6abc5fedc Try to fix the line ending problem 
... at github when using the browser for a PR.

It seems that the web interface inserts an additional CR
and doesn't stick to the LF line endings.

Not sure it helps though. It can't hurt though.
 2023-05-23 16:12:11 +02:00
Dirk WetterandGitHub f71619326d Merge pull request #2362 from drwetter/fix_2361_dnsminimal 
Fix misleading output
 2023-05-16 10:44:56 +02:00
Dirk Wetter 9b8dc3a07e Fix misleading output 
... when instructed to do no DNS queries at all
 2023-05-16 09:05:04 +02:00
Dirk WetterandGitHub be987d17a0 Merge pull request #2360 from mum-viadee/run_renego_sni_patch 
Secure renegotiations tests need servername for servers that use SNI
 2023-05-15 15:26:37 +02:00
Dirk WetterandGitHub e33e0bc204 Update testssl.sh 
clarify comment
 2023-05-15 15:04:59 +02:00
Dirk WetterandGitHub aa5235e658 Merge pull request #2346 from Odinmylord/3.1dev 
Add information to RSA-PSS report
 2023-04-01 09:51:27 +02:00
Dirk WetterandGitHub a04291fdb1 Merge pull request #2352 from dcooper16/pss_cert_tls13 
Find RSASSA-PSS certificates with TLS 1.3
 2023-03-31 16:38:14 +02:00
Dirk WetterandGitHub 13b42069d5 Merge pull request #2353 from dcooper16/brainpooltls13 
Add support for brainpool curves with TLS 1.3
 2023-03-31 16:36:33 +02:00
Dirk WetterandGitHub 82fbd8076e Merge pull request #2347 from drwetter/suse_docker 
Switching from Alpine Image to multistaged opensuse/leap
 2023-03-24 09:23:26 +01:00
Dirk 91f3d9716b amending previous commit 2023-03-23 15:05:15 +01:00
Dirk 90aa86ce6b add another contributor and change 
(not related to this PR but it'll be forgotten otherwise)
 2023-03-23 14:45:51 +01:00