Commit Graph

268 Commits

Author SHA1 Message Date
b8384eceff - underline CN, SAN and issuer deutschepost case (see sourceforge.net/p/ssllabs/mailman/message/33764851/) 2015-04-10 15:15:47 +02:00
b670c01f36 Update Readme.md 2015-04-09 22:24:57 +02:00
b0c68d4429 FIX: missing server preferences, NEW: each cipher server preferences per protocol! 2015-04-09 22:08:48 +02:00
9945ef0e81 - 2015-04-09 21:45:22 +02:00
5051eb3d5d - fixes to changes from Peter's better cmd line parsing
- cosmetc improvements (vulneraibilities)
2015-04-09 21:42:52 +02:00
cb98920733 Merge pull request #79 from PeterMosmans/refactoring
Refactored major parts of code
2015-04-09 21:38:29 +02:00
28518abb55 Removed GNU getopt
Minor fix to --poodle option
2015-04-07 18:05:52 +10:00
2009cfef26 Refactored major parts of code
Note that due to the refactoring of some status messages, the output will be slightly different (more verbose) than previous versions

Moved specific status messages to http_header()
Moved specific status messages to breach()
Moved specific status messages to ccs_injection()
Moved specific status messages to heartbleed()
Moved specific status messages to renego()
Moved specific status messages to crime()
Moved specific status messages to tls_poodle()
Moved specific status messages to freak()
Moved specific status messages to beast()

Added some more documentation for functions

Fixed typos in help

Created new function main:
This is the main function of testssl.sh
Refactored major part of the original main function

Created new function startup:
Parses the startup options

Created new function intialize_globals:
Initializes all used global variables

Created new function scanning_defaults:
Sets default scanning options when only one parameter (URI) is given

TODO: Refactor more/duplicate parts of functions

Note: For the new functions, fixed spaces (4) are used instead of tabs
2015-04-07 17:00:43 +10:00
44b31a1c54 FIX #80: show HTTP 401 2015-04-02 13:35:22 +02:00
80f932ca30 NEW: added security headers 2015-04-02 13:04:57 +02:00
9ea84ee6ec - got rid of "strings" 2015-04-02 12:19:24 +02:00
348f651fc8 - updated binaries from Peter. Necessary because handshake under rare circumstances
failed (routines:tls1_setup_key_block:cipher or hash unavailable:t1_enc.c:802.
  SLES 12 server, some ciphers under TLS 1.2
2015-04-02 11:46:12 +02:00
7b9c125046 protocol check via sockets now also for SSLv3 2015-03-31 10:34:30 +02:00
5e9bb1c7e2 cleanups / bsd date in tls time 2015-03-30 23:09:19 +02:00
74b6bd7241 rechi 2015-03-30 15:03:29 +02:00
9bd1b44270 open fixes from Rechi (pull request $67) 2015-03-30 14:59:44 +02:00
77fd58e556 Merge pull request #75 from feld/tr
Using square brackets in tr results in trying to match/replace them
2015-03-19 09:14:54 +01:00
c0e6777666 Merge pull request #76 from feld/printf
Fix variable directly referenced in printf
2015-03-19 09:14:32 +01:00
1791af3659 Fix variable directly referenced in printf 2015-03-18 15:43:06 -05:00
bd95459c8d Using square brackets in tr results in trying to match/replace them 2015-03-18 15:42:21 -05:00
7157d094bb Дилян 2015-03-17 22:14:05 +01:00
485f0f8080 - FIX for 3des cipher report (thx Дилян) 2015-03-17 22:12:25 +01:00
1de535cc25 - added two pairs of ciphers to server preference (thx Dilian) 2015-03-17 22:02:23 +01:00
79396acf97 - working tls handshake with bash sockets (not yet in production, hint: see option "-q" in the bottom) 2015-03-17 18:11:18 +01:00
c4877799ec - check whether openssl is executable
- spaces to tabs
- adding hint to "aha" in help
2015-03-17 15:14:58 +01:00
761e854610 - FIX for date --> applied to other BSD systems too
- FIX for SNI output as it doensn';t make sense for non HTTP servives
- lines for RC4 and PFS shortenedA
- display all MX records to test before testing
- removed LOCERR, added CCS_MAX_WAITSOCK, HEARTBLEED_MAX_WAITSOCK
2015-03-17 12:22:21 +01:00
c8090600b6 - some internal code internal cleanups
- minor cosmetic output corrections
- preparation for bash sockets for SSLv3 to TLS 1.2
2015-03-16 00:22:51 +01:00
41c4ed94c1 further improvements through shellcheck 2015-03-15 16:59:29 +01:00
639258cfe0 FIX #74 for sed BSD: doesn't like inline \n
headline for BEAST was missing
2015-03-15 16:10:14 +01:00
c2ece82d9b - FIX: regression for wc -l w/o cat (3x)
- removal of unneccessary waitpid, inline
2015-03-15 14:41:34 +01:00
bdd0602c1f - prework for checking hpkp fingerprints 2015-03-15 10:18:37 +01:00
7d43dd7c8a - Shellcheck static analysis by Mark 2015-03-15 09:04:49 +01:00
06268de428 Merge pull request #73 from feld/master
Shellcheck static analysis
2015-03-15 08:56:01 +01:00
5478fe14e7 Make date command work with both Linux and FreeBSD 2015-03-13 15:51:50 -05:00
b57d535341 Merge branch 'master' of github.com:feld/testssl.sh 2015-03-13 15:24:37 -05:00
fa83aa33c4 more ps >/dev/null fixes
more useless cat
2015-03-13 15:24:16 -05:00
4f6e94ab29 More useless cat 2015-03-13 15:19:47 -05:00
541788fcad Remove 2>&1 for the ps $pid lines; it's unnecessary 2015-03-13 15:16:21 -05:00
69dfc1f322 Merge branch 'master' of github.com:feld/testssl.sh 2015-03-13 15:12:45 -05:00
268b3b02f4 Remove useless kittens 2015-03-13 15:10:36 -05:00
6747974bc3 Revert to 2>&1 > /dev/null order because it isn't behaving correctly. 2015-03-13 14:56:30 -05:00
f530eaf5fc Replace expr with $(( ))
https://github.com/koalaman/shellcheck/wiki/SC2003
2015-03-13 14:54:36 -05:00
846dbad3d2 Fix missing single quote 2015-03-13 14:26:02 -05:00
95b842ee49 Fix order of the redirect
https://github.com/koalaman/shellcheck/wiki/SC2069
2015-03-13 10:00:14 -05:00
4b513de6c0 Replace backticks with $(..)
https://github.com/koalaman/shellcheck/wiki/SC2006
2015-03-13 09:52:39 -05:00
d31b517b31 - @feld 2015-03-13 12:21:06 +01:00
dc05ff9b13 - FIX garbled output for servers with a TLS reply on SSLv2 socket call 2015-03-13 12:20:19 +01:00
1ca03e3ed9 Merge pull request #72 from feld/feld
Minor optimizations to reduce unnecessary forking
2015-03-13 11:00:52 +01:00
d4deef5920 Minor optimizations to redunce unnecessary forking 2015-03-11 12:13:38 -05:00
7348093a12 FIX for #71 (proper workaround for lastpipe in rc4, pfs, and cbc) 2015-03-09 08:07:45 +01:00