Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
244 Commits 16 Branches 39 Tags
c4877799ec870c03a195df17a5c87e80cfd63d78
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk c4877799ec - check whether openssl is executable 
- spaces to tabs
- adding hint to "aha" in help
 2015-03-17 15:14:58 +01:00
Dirk 761e854610 - FIX for date --> applied to other BSD systems too 
- FIX for SNI output as it doensn';t make sense for non HTTP servives
- lines for RC4 and PFS shortenedA
- display all MX records to test before testing
- removed LOCERR, added CCS_MAX_WAITSOCK, HEARTBLEED_MAX_WAITSOCK
 2015-03-17 12:22:21 +01:00
Dirk c8090600b6 - some internal code internal cleanups 
- minor cosmetic output corrections
- preparation for bash sockets for SSLv3 to TLS 1.2
 2015-03-16 00:22:51 +01:00
Dirk 41c4ed94c1 further improvements through shellcheck 2015-03-15 16:59:29 +01:00
Dirk 639258cfe0 FIX #74 for sed BSD: doesn't like inline \n 
headline for BEAST was missing
 2015-03-15 16:10:14 +01:00
Dirk c2ece82d9b - FIX: regression for wc -l w/o cat (3x) 
- removal of unneccessary waitpid, inline
 2015-03-15 14:41:34 +01:00
Dirk bdd0602c1f - prework for checking hpkp fingerprints 2015-03-15 10:18:37 +01:00
Dirk 7d43dd7c8a - Shellcheck static analysis by Mark 2015-03-15 09:04:49 +01:00
Dirk Wetter 06268de428 Merge pull request #73 from feld/master 
Shellcheck static analysis
 2015-03-15 08:56:01 +01:00
Dirk d31b517b31 - @feld 2015-03-13 12:21:06 +01:00
Dirk dc05ff9b13 - FIX garbled output for servers with a TLS reply on SSLv2 socket call 2015-03-13 12:20:19 +01:00
Dirk Wetter 1ca03e3ed9 Merge pull request #72 from feld/feld 
Minor optimizations to reduce unnecessary forking
 2015-03-13 11:00:52 +01:00
Dirk 7348093a12 FIX for #71 (proper workaround for lastpipe in rc4, pfs, and cbc) 2015-03-09 08:07:45 +01:00
Dirk 8b67fa3889 - NEW: proper check for freak CVE-2015-0204 
- NEW: check for number of keys for hpkp
- cleanup hsts+hpkp
 2015-03-07 09:51:55 +01:00
Dirk 48f5d6db87 - MX record: the lower the # the higher the priority (thx, rechi) 2015-03-03 07:21:30 +01:00
Dirk 8288bbd375 - see #41 2015-03-02 14:44:02 +01:00
Dirk 2d6c087f84 - finalize mx records, FIX: #41 2015-03-02 14:42:28 +01:00
Dirk Wetter 21f3cbf009 Merge pull request #66 from Rechi/master 
Check MX Records (#41)
 2015-03-02 14:13:33 +01:00
Dirk 4e4e85fe96 - remark about rc4 rfc 2015-03-02 14:09:34 +01:00
Dirk Wetter c279fb90b7 Update Readme.md 2015-03-02 13:59:45 +01:00
Dirk 694d579110 - better detection for ssl poodle 
- change of shorticut from zero to letter o
 2015-02-27 21:21:39 +01:00
Dirk Wetter d7c2dedd06 Merge pull request #65 from schuetzm/fix-nrsaved 
Don't let error message slip through when no certs have been downloaded
 2015-02-24 18:28:09 +01:00
Dirk Wetter c8e3bce79a Merge pull request #64 from PeterMosmans/spellingfix 
FIX: minor spelling issue
 2015-02-24 10:03:32 +01:00
Dirk f193a0e5b0 - FIX #62 (CentOS 7/RHEL: engine failure), was not usable b4 2015-02-23 10:40:10 +01:00
Dirk affac236ca - FIXED: #47 ("double" linefeed if RFC mapping file is not present) 2015-02-22 23:05:40 +01:00
Dirk 4e863e4fa5 - NEW: tells how many certificates provides (and grabs them with DEBUG=1) 
- COLOR for no cipher order is red now
- "VULNERABLE" comes now always with "NOT ok"
 2015-02-21 11:47:12 +01:00
Dirk d16939ea8f - FIXED: #38, new openssl from Peter Mosmans makes the workaround unneccessary 2015-02-21 10:46:30 +01:00
Dirk 14385bf435 - to tell the difference between the sets of binaries 2015-02-21 10:39:27 +01:00
Dirk 31262a1011 - FIXED: #38, new openssl from peter mosmans makes the workaround unneccessary 2015-02-21 10:38:04 +01:00
Dirk Wetter 97337cb142 Update Readme.md 2015-02-15 14:10:11 +01:00
Dirk 966b75a893 - Fix #55 (302 detection for URL) 2015-02-15 14:00:13 +01:00
Dirk 5ea0b8c281 - Fix #46 (preload lists HPKP and HSTS) 
- word match for includeSubDomains (useful if one specified the keyword wrong)
 2015-02-15 13:37:44 +01:00
Dirk 388ffa8fe0 - FIX #60: mod_security CRS doesn't complain anymore 2015-02-15 13:14:11 +01:00
Dirk 07fbb8c8f0 - certificate sha2 fingerprint added (#59, @@kyhwana) 
- sha1 fp: removed colons as long serials after it look ugly (lf)
 2015-02-15 12:58:51 +01:00
Dirk 6d37c9a3c5 - workaround for issue #58, same in http_header 
- FIX: if a web site returned IMAP e.g. in HTML code it may have led to the assumption IMAP is the service ;-/
 2015-02-13 16:01:46 +01:00
Dirk e031ec83ed - FIX regression: CRIME check 
- FIX: port ended up sometimes as URL part
- also if it runs http a line is displayed as confirmation that HTTP was detected
 2015-02-12 13:40:53 +01:00
Dirk 8a94b05bc6 - new build with proper banner string 2015-02-12 11:12:49 +01:00
Dirk Wetter 8d06f03f0b Update Readme.md 2015-02-12 10:50:52 +01:00
Dirk Wetter 43fe25188a Update Readme.md 2015-02-12 09:45:26 +01:00
Dirk b7911371d1 - WORKAROUND for bug in PeterMosmans OPENSSL chacha/poly version: not testing EXPORT40/EXPORT then 2015-02-12 09:32:47 +01:00
Dirk 8e9b07e72d - NEW: check for Secure Client-Initiated Renegotiation 
- debugging #1: PS4 and debugme
- debugging statement tmpfile_handle where missing #2
 2015-02-11 09:43:04 +01:00
Dirk Wetter a2b4319571 Update Readme.md 2015-02-10 13:18:02 +01:00
Dirk 98f035f9e3 - sha2 like mozilla 2015-02-10 12:43:08 +01:00
Dirk 2a70c5ca01 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-02-10 12:40:14 +01:00
Dirk Wetter cb64eacbb1 Update Readme.md 2015-02-10 12:39:54 +01:00
Dirk Wetter ad4d2308bd Update Readme.md 2015-02-10 12:39:20 +01:00
Dirk Wetter 4ee7abb863 Update Readme.md 2015-02-10 12:39:02 +01:00
Dirk 5683e1bf14 - vanilla as a workaround for bug #38 2015-02-10 12:37:03 +01:00
Dirk Wetter 0181d3b349 Update Readme.md 2015-02-10 12:34:35 +01:00
Dirk Wetter d35753414a Update Readme.md 2015-02-10 12:20:59 +01:00
Dirk Wetter 027c8c2867 Update Readme.md 2015-02-10 12:00:02 +01:00
Dirk Wetter 21819b7996 Update Readme.md 2015-02-10 11:59:47 +01:00
Dirk fb7f7df545 - starttls for ldap now also supported 2015-02-09 14:02:02 +01:00
Dirk Wetter 141dc946aa Merge pull request #57 from schuetzm/patch-1 
Trivial typo fix
 2015-02-09 13:52:11 +01:00
Dirk Wetter 8af51737c4 Update Readme.md 
Bug #38
 2015-02-05 10:06:27 +01:00
Dirk Wetter e296e47cbf Delete openssl32-1.0.2pm.chacha+poly 2015-02-05 10:02:54 +01:00
Dirk 08a6933404 - updated to 1.0.2 stable from pm 
- still bug #38: https://github.com/drwetter/testssl.sh/issues/38
 2015-02-05 09:58:33 +01:00
Dirk be2a0f613a Merge branch 'master' of github.com:drwetter/testssl.sh 
Conflicts:
	openssl-bins/openssl-1.0.2-chacha.pm/openssl32-1.0.2pm-krb5.chacha+poly.asc
	openssl-bins/openssl-1.0.2-chacha.pm/openssl64-1.0.2pm-krb5.chacha+poly.asc
 2015-02-05 09:54:24 +01:00
Dirk 008782d310 - updated to 1.0.2 stable from pm 
- still bug #38: https://github.com/drwetter/testssl.sh/issues/38
 2015-02-05 09:48:42 +01:00
Dirk Wetter 6a8984d86d Delete openssl64-1.0.2pm.chacha+poly.asc 2015-02-05 09:48:28 +01:00
Dirk Wetter 466f569c25 Delete openssl64-1.0.2pm.chacha+poly 2015-02-05 09:48:17 +01:00
Dirk Wetter 5bbfec980f Delete openssl64-1.0.2pm-krb5.chacha+poly.asc 2015-02-05 09:48:05 +01:00
Dirk Wetter c0676b97ca Delete openssl32-1.0.2pm.chacha+poly.asc 2015-02-05 09:47:55 +01:00
Dirk Wetter 7e34664055 Delete openssl32-1.0.2pm.chacha+poly 2015-02-05 09:47:43 +01:00
Dirk Wetter 4d5cb3237a Delete openssl32-1.0.2pm-krb5.chacha+poly.asc 2015-02-05 09:47:28 +01:00
Dirk 7c9b905b85 - updated to 1.0.2 stable from pm 
- still bug #38: https://github.com/drwetter/testssl.sh/issues/38
 2015-02-05 09:41:56 +01:00
Dirk ec86845eb4 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-02-05 09:35:26 +01:00
Dirk 3020d2c455 - updated to 1.0.2 stable from pm 
- still bug: https://github.com/drwetter/testssl.sh/issues/38
 2015-02-05 09:33:36 +01:00
Dirk Wetter 250a6755a8 Update Readme.md 
new stable 1.0.2 branch, also with 4 more ciphers
 2015-02-05 09:22:01 +01:00
Dirk bad4bcfde2 - checking protoype of tls sockets but not called/working yet 
- small fixes $DEBUG
 2015-02-04 09:48:34 +01:00
Dirk fba44b2f2c - NEW: certificate fingerprints + serial 2015-02-03 23:46:47 +01:00
Dirk 4062e572fa - TLS 1.0/1.1 is not green anymore, only TLS 1.2 is the real one! 
- no bold for 3DES and medium
- nslookup for MSYS2 etc. having no hosts (and fixing error message if host doesn't exist)
 2015-02-03 23:20:59 +01:00
Dirk 6976a40eeb Merge branch 'master' of github.com:drwetter/testssl.sh 2015-01-30 16:27:27 +01:00
Dirk 67b68d1d10 FIX: experiration threshold < 30 days 2015-01-30 16:26:55 +01:00
Dirk Wetter 399d097644 Update Readme.md 2015-01-30 10:35:07 +01:00
Dirk e84a5efd8f - FIX: STARTTLS is the criteria for using bash sslv2 or not, not the service 2015-01-29 23:24:49 +01:00
Dirk 46e57484bc FIX: BEAST (supports higher protocols only when CBC ciphers detected) 
- FIX: URL in app banner
 - cosmetic issue: display also if one cookie was issue the number 1
 2015-01-29 23:20:58 +01:00
Dirk d0e7d7bff9 * NEW: protocol check SSLv2 in bash sockets per default (HTTP) 
(fallback to openssl with SSL_NATIVE=1)
 2015-01-29 10:46:16 +01:00
Dirk 6115cf68ee @nvsofts for LibreSSL patch 2015-01-29 09:34:32 +01:00
Dirk 509aaaa2cc * NEW: emphasize any numbers in http header output 
* internal renaming of color functions ( --> pr_*)
* new color switches (tput)
* $COLOR is treated as integer not string
* for some issues color adjusted accordingly (red --> brown/yellow)
 2015-01-29 09:33:35 +01:00
Dirk fbfdd03245 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-01-28 15:31:13 +01:00
Dirk Wetter 8777fd1f9a Merge pull request #53 from gitter-badger/gitter-badge 
Add a Gitter chat badge to Readme.md
 2015-01-28 09:28:50 +01:00
Dirk Wetter 4fdc938b58 Merge pull request #54 from nvsofts/fix_libressl_gost 
Fix GOST handling in LibreSSL
 2015-01-28 09:24:32 +01:00
Dirk Wetter d711548789 Update Readme.md 2015-01-26 12:37:00 +01:00
Dirk 9009cc6ce0 fix for wrong # of HttpOnly cookie 2015-01-23 15:09:35 +01:00
Dirk 1d9eb8dec4 fix for double line and double application banner 2015-01-23 12:17:27 +01:00
Dirk 31b31623a5 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-01-23 12:02:12 +01:00
Dirk bf920ca37a BREACH is not labeled as experimental anymore as it works reliably 
- so is heartbleed
 - FIX: shopt is removed in rc4 as most of the bash shells segfault here (bug!)
 - not tested anymore for HTTP within starttls, instead displaying here a line
 2015-01-23 12:01:32 +01:00
Dirk fccc24e232 - VERBOSE -eq 1 is now DEBUG -eq 2 (VERBOSE completely removed) 
- DEBUG has now four modes 1: just keep files 2: VERBOSE -eq 1 3: head hexdumps and other stuff, 4: full debugging
- env and internal stuff $TEMPDIR
 2015-01-21 12:53:00 +01:00
Dirk Wetter a07fd55bb1 Update Readme.md 2015-01-20 22:13:15 +01:00
Dirk d9075f198a Merge branch 'master' of github.com:drwetter/testssl.sh 2015-01-20 22:10:22 +01:00
Dirk f0bd69ca40 - BEAST finally works 
- handling of spaces in output
- different ciphers
- FIX: setopt also for RC4 (proper handling of ret value)
 2015-01-20 21:59:21 +01:00
Dirk 10ea361b9c first prototype BEAST | FIX: maketempf in initialize_engine | FIX: exit statements in main w/ more meaning/shorter 2015-01-20 21:51:49 +01:00
Dirk Wetter c280d9a528 Update Readme.md 2015-01-16 17:18:38 +01:00
Dirk Wetter cc9046064c Update Readme.md 2015-01-16 17:16:22 +01:00
Dirk d129531371 fine tuning on banner 2015-01-15 20:29:46 +01:00
Dirk 4c72e059b8 - FIX: grep -a if we hit binary content with http_header (also if otherwise specified) 
- NEW: can specify URL (used for header matters and breach)
- FIX: better handling of >1 cookies
 2015-01-14 12:23:53 +01:00
Dirk 549d523728 * NEW: cookie flags (experimental) [URL is missing] 
* FIX: 30x handling for http_header (hint for final URL if stalled)
* FIX: proper display of app-banners if >1
 2015-01-14 09:48:44 +01:00
Dirk 400f06b64f SNI is not anymore 2do (removed misleading comment) 2015-01-12 23:28:38 +01:00
Dirk c8e4db1a39 debugging more fine grained 2015-01-12 23:15:26 +01:00