Commit Graph

4921 Commits

Author SHA1 Message Date
b89a6bd936 make it better 2025-05-08 13:22:45 +02:00
4e24fcb31c rename 2025-05-08 13:15:51 +02:00
578c179211 Testing whether macos=14 works and is for free 2025-05-08 13:10:55 +02:00
760781068d Merge pull request #2758 from polarathene/patch-2
ci: `Dockerfile` - Support local and git builds with the openSUSE Leap image
2025-05-08 11:25:30 +02:00
5719fccc93 Merge pull request #2757 from sullo/3.2
Lowercase URL to match 'HTTPS://<server>/'
2025-05-06 09:51:06 +02:00
bf895807f5 docs: Revise Dockerfile instructions 2025-05-06 17:26:56 +12:00
c1346f2032 chore: Update Dockerfile-alpine 2025-05-06 16:32:24 +12:00
312f326734 ci: Dockerfile - Support local and git builds with Leap image 2025-05-06 16:00:06 +12:00
70fd83f6a9 Merge pull request #2756 from testssl/docker_alpine
Change filename to -alpine / upgrade Ubuntu
2025-05-05 22:08:17 +02:00
6678d2dedc Lowercase URL to match 'HTTPS://<server>/' 2025-05-05 14:42:13 -04:00
f09f742ee3 fix gh action
Not sure why this has been triggered though.

 #   Failed test 'Check whether CSV output matches baseline file from testssl.sh'
 #   at t/61_diff_testsslsh.t line 57.
 #
 # %s
 # @@ -1,5 +1,4 @@
 #  "id","fqdn/ip","port","severity","finding","cve","cwe"
 # -"engine_problem","/","443","WARN","No engine or GOST support via engine with your ./bin/openssl.Linux.x86_64","",""
 #  "service","testssl.sh/81.169.166.184","443","INFO","HTTP","",""
 #  "pre_128cipher","testssl.sh/81.169.166.184","443","INFO","No 128 cipher limit bug","",""
 #  "SSLv2","testssl.sh/81.169.166.184","443","OK","not offered","",""
 # Looks like you failed 1 test of 1.
 t/61_diff_testsslsh.t ..............
2025-05-05 20:11:12 +02:00
74a261d2f0 remove file 2025-05-05 13:25:25 +02:00
84da656683 Change Dockerfile.git to -alpine / upgrade Ubuntu 2025-05-05 13:24:57 +02:00
286bc150db rename file 2025-05-05 13:23:06 +02:00
1400c7875d Change filename to -alpine / upgrade Ubuntu 2025-05-05 13:16:41 +02:00
252cee6207 Merge pull request #2752 from polarathene/patch-1
refactor: Docker (Alpine) improvements
2025-05-05 12:15:08 +02:00
0b4b2d9ffc chore: Dockerfile.git - Remove apk update 2025-05-01 14:54:58 +12:00
e0c3502676 refactor: Docker (Alpine) improvements
60MB => 38MB (dist-git) or 30MB (dist-local)
2025-05-01 14:42:21 +12:00
3a9746ccc5 Merge pull request #2749 from testssl/revert-2748-docker.ghcr
Revert "Trying to use the regular Dockerfile ...."
2025-04-25 18:45:41 +02:00
f00af62d9b Revert "Trying to use the regular Dockerfile ...." 2025-04-25 18:22:14 +02:00
3fd3470e49 Merge pull request #2747 from testssl/dependabot/github_actions/docker/build-push-action-6.16.0
Bump docker/build-push-action from 6.15.0 to 6.16.0
2025-04-25 18:19:21 +02:00
81e28b9a96 Merge pull request #2748 from testssl/docker.ghcr
Trying to use the regular Dockerfile ....
2025-04-25 17:43:50 +02:00
2a428f1871 Trying to use the regular Dockerfile ....
.. for GHCR.

See comment https://github.com/testssl/testssl.sh/issues/2348#issuecomment-2828960763
from @polarathene.

Probably the Dockerfile.git is not in use but I'd rather wait before removing it.
2025-04-25 16:18:22 +02:00
abd2650766 Bump docker/build-push-action from 6.15.0 to 6.16.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.15.0 to 6.16.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v6.15.0...v6.16.0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-25 00:28:49 +00:00
06ba579475 Merge pull request #2742 from testssl/bump_version
Prepare for upcoming release
v3.2.0
2025-04-23 11:33:39 +02:00
51a21cb5f1 Merge pull request #2744 from testssl/fix_imagebuild
Remove redundant commands in Dockerfile
2025-04-23 11:07:23 +02:00
622fe3f7b1 fix typos 2025-04-22 17:48:32 +02:00
ca57914bd0 Reflect release status in Readme.md
... and amend / rearranged a few sentences
2025-04-22 17:45:56 +02:00
a9a1295875 Merge pull request #2745 from testssl/amend_changelog_and_credits
Amend changes and attributions
2025-04-22 16:50:53 +02:00
4d10873727 Amend changes and attributions 2025-04-22 16:47:54 +02:00
58da779a8e Merge pull request #2721 from testssl/fix_some_ipv6proxy_issues
Fix some ipv6proxy issues
2025-04-22 15:05:05 +02:00
e30b558860 Remove redundant commands
.. see https://github.com/testssl/testssl.sh/issues/2420#issuecomment-1762749767

As suggested by @polarathene the not needed repos are more elegantly removed,
commands for removing util-linux removal and zypper up were redudant and thus
squashed.

First stage was build manually and it looked fine.

This fixes #2439 .
2025-04-22 13:28:30 +02:00
ffe5dea844 remove misleading command 2025-04-22 12:55:42 +02:00
b4cdc37f9e trailing zero sounds better / is more distinguishable 2025-04-22 12:47:48 +02:00
295a68e7ab Just bump version for upcoming release 2025-04-18 13:32:53 +02:00
6746fa54b8 Merge pull request #2740 from testssl/update_CAs
Update CA stores for 3.2
2025-04-18 13:17:50 +02:00
d1440d646d For better autoselction w mouse move comma 2025-04-17 18:50:48 +02:00
668b98c9ce remove DST Root CA X3.txt 2025-04-17 18:41:44 +02:00
3dad99a93a Update Java, Apple and MS store
- Java is from JDK 21
- Apple and MS from this week
2025-04-17 18:39:02 +02:00
41c3110c0e Update Linux and Mozilla CA store
- Linux: Debian 12
- Mozilla from 2025-02-25
2025-04-17 18:03:50 +02:00
128d8b5997 Merge pull request #2731 from testssl/new_Handshakes
Update handshakes
2025-04-17 16:13:31 +02:00
ebb7cf558e Update handshake 2025-04-16 21:48:30 +02:00
81e4856b79 fix typo 2025-04-16 21:35:27 +02:00
4a2228f401 Updating Android handshakes
- Android 13 and 14 were added. They are the same, see ja3 + ja4 value
- as it turned out Android 11 and 12 have also the same ja3 + ja4 values (retrieved from old pcap files)
- so both will be labeled 11/12 an 13/14
- old pcaps from Android 11/12 showed no ALPN --> corrected
2025-04-16 21:28:08 +02:00
a701541318 Merge pull request #2735 from dcooper16/tls13_pq_kx
Support decrypting TLS 1.3 handshakes with PQ key exchange
2025-04-11 12:22:25 +02:00
d1531cdf60 Support decrypting TLS 1.3 handshakes with PQ key exchange
This commit modifies testssl.sh so that TLS 1.3 handshakes that use post-quantum algorithms for key exchange can be decrypted, if $OPENSSL supports the algorithms.
2025-04-10 14:05:30 -07:00
459ccee589 Merge pull request #2737 from dcooper16/tls13_pq_sigalg
Support ML-DSA server keys
2025-04-10 20:49:29 +02:00
ecaa7878e5 Support ML-DSA server keys
This commit adds support for server certificates that have ML-DSA pubilc keys. It also adds supports for certificates that are signed with ML-DSA or SLH-DSA. The ML-DSA code points for the signature_algorithms extension are taken from https://datatracker.ietf.org/doc/draft-tls-westerbaan-mldsa/ and are the ones used by OpenSSL 3.5.0.
2025-04-10 09:15:04 -07:00
3fbceada58 Merge pull request #2736 from testssl/rm_krb
Remove KRB cipher info
2025-04-10 13:23:16 +02:00
7b6a7d7ade Remove KRB cipher info 2025-04-10 13:22:09 +02:00