Commit Graph
100 Commits
Author SHA1 Message Date
Dirk cd575526a7 Fix CCS injection regression
The rhs of the pattern was off by one byte and it worked in practise until recent PR #2657.

This fixes #2691 for 3.2 .
2025-05-21 14:17:54 +02:00
Dirk WetterandGitHub 388f3a3321 Merge pull request #2761 from testssl/mac_runner
PoC github action runner macos-14
2025-05-20 17:59:19 +02:00
Dirk Wetter a76e06f887 Polish some sentences
... wrt to the now even better unit testing.
2025-05-20 16:50:39 +02:00
Dirk Wetter f8f00de5a0 Shorten name for badge 2025-05-20 16:43:06 +02:00
Dirk Wetter d87f5f68de Sync runners / rename comments for badge 2025-05-20 16:37:48 +02:00
Dirk Wetter ce96cc5816 Add badge for MacOS rummer 2025-05-20 16:36:29 +02:00
Dirk Wetter 7815b67695 Merge branch '3.2' into mac_runner 2025-05-20 16:31:34 +02:00
Dirk WetterandGitHub 242256bd58 Merge pull request #2778 from testssl/drwetter-patch-1
slight rewording
2025-05-20 12:38:42 +02:00
Dirk WetterandGitHub 81b377bda9 slight rewording 2025-05-20 12:37:57 +02:00
Dirk Wetter d0143b181b Handle space problem 2025-05-20 10:48:54 +02:00
Dirk Wetter 85d8d44fbe Try to fix the renegotiation problem
as suggested, see https://github.com/testssl/testssl.sh/issues/2765#issuecomment-2891140503
2025-05-19 16:24:46 +02:00
Dirk Wetter a685fc252d Take shorter OPenSSL cipher name into account
AEAD-CHACHA20-POLY1305-SHA256    vs.
TLS_CHACHA20_POLY1305_SHA256
2025-05-19 13:52:03 +02:00
Dirk WetterandGitHub 54964a9bc6 Merge pull request #2777 from polarathene/chore/consistent-dockerfile
chore: `Dockerfile` consistency
2025-05-19 13:10:45 +02:00
Dirk WetterandGitHub 0d0c5d0ab9 Merge pull request #2771 from polarathene/ci/docker-prefer-dist-local
ci: Docker - Prefer `dist-local` stage
2025-05-18 16:24:43 +02:00
Dirk WetterandGitHub 35457f9d99 Merge pull request #2776 from testssl/drwetter-patch-1
More badges
2025-05-17 18:22:29 +02:00
Dirk WetterandGitHub 9f73f782a1 Update Readme.md
Bluesky badge
2025-05-17 16:35:58 +02:00
Dirk WetterandGitHub 05fb3c3fe9 Identation 2025-05-17 16:20:40 +02:00
Dirk WetterandGitHub d0aa6fa84d Update Readme.md
More badges
2025-05-17 16:19:42 +02:00
Dirk WetterandGitHub 8d1bcab878 Merge pull request #2775 from testssl/ubuntu_runner
Fix indentation
2025-05-16 19:06:57 +02:00
Dirk WetterandGitHub 7df43ea752 More badges
see https://shields.io/badges
2025-05-16 19:06:24 +02:00
Dirk Wetter 5b2e8ac12c fix indentation 2025-05-16 18:21:20 +02:00
Dirk Wetter c109cafa17 Merge branch '3.2' into mac_runner 2025-05-16 18:16:58 +02:00
Dirk Wetter 42b3352106 rename Dockerfile 2025-05-16 18:15:57 +02:00
Dirk Wetter b77563951d Rename runner, change suffix for Dockerfile 2025-05-16 18:14:35 +02:00
Dirk 222ad8ae36 Fix indentation 2025-05-16 18:07:09 +02:00
Dirk WetterandGitHub ce6cdfea75 Merge pull request #2774 from testssl/ubuntu_runner
Update / rename runner to be in sync w Mac runner
2025-05-16 18:05:34 +02:00
Dirk cbd15020e2 Change reference to badge 2025-05-16 17:59:00 +02:00
Dirk 5e248c05dc Update / rename runner to be in sync w Mac runner 2025-05-16 17:50:33 +02:00
Dirk WetterandGitHub 0ab5e2d878 Merge branch '3.2' into ci/docker-prefer-dist-local 2025-05-16 17:23:30 +02:00
Dirk WetterandGitHub 6aa1c58c34 Merge pull request #2773 from testssl/drwetter-patch-1
Dockerfile
2025-05-16 16:11:46 +02:00
Dirk WetterandGitHub 3977057a1e Update unit_tests.yml
Dockerfile.alpine here
2025-05-16 16:11:22 +02:00
Dirk WetterandGitHub bc4a1ab402 Merge pull request #2772 from Tazmaniac/docker-fix
Lowercase the repository name.
2025-05-16 09:20:14 +02:00
Dirk Wetter 4db9cb5afe Unify ECDH bitlength 2025-05-14 14:07:07 +02:00
Dirk Wetter 5e888ff7ee rename TLS 1.3 ciphers when using LibreSSL 2025-05-14 10:28:59 +02:00
Dirk WetterandGitHub afbbb0f2c1 Merge pull request #2770 from polarathene/patch-3
ci(fix): Docker workflow `build-args` input should be a string
2025-05-12 13:44:47 +02:00
Dirk WetterandGitHub 68c148dabe Merge pull request #2768 from polarathene/fix/ci-docker-3.2
ci(fix): 3.2 - Docker support adjustments
2025-05-12 12:15:11 +02:00
Dirk Wetter 0aad0a0fac Try /usr/bin/echo for testing
.. although it seems not an option to include this in prod.
RSsee https://github.com/testssl/testssl.sh/issues/2765

Omitting redirecting stderr
2025-05-12 10:43:43 +02:00
Dirk WetterandGitHub 7f48b5ffed Merge pull request #2766 from testssl/drwetter-patch-1
Add DeepWiki doc
2025-05-09 12:57:18 +02:00
Dirk WetterandGitHub 9e89129e4f Add DeepWiki doc 2025-05-09 12:56:35 +02:00
Dirk Wetter f1daf10c30 make mv visible 2025-05-09 10:09:04 +02:00
Dirk Wetter b7270a49c2 correct printf 2025-05-09 10:06:08 +02:00
Dirk Wetter fe57ed8eea move openssl away 2025-05-09 10:02:30 +02:00
Dirk WetterandGitHub f44464408d Merge pull request #2764 from vinny-pereira/dev
Fix missing line feed in run_breach() failure output
2025-05-09 09:36:45 +02:00
Dirk Wetter 18c4428cf4 elSif 2025-05-09 08:53:17 +02:00
Dirk WetterandGitHub a57a92fa1a Merge pull request #2762 from testssl/android15
Add Android15 handshake simulation
2025-05-08 23:35:05 +02:00
Dirk Wetter 42f738572b fix spelling error 2025-05-08 23:10:24 +02:00
Dirk Wetter 5f471c76ee Numbering the checks 2025-05-08 23:08:59 +02:00
Dirk Wetter 042b0c160a Naming checks, exempt two checks for MacOS 2025-05-08 23:06:51 +02:00
Dirk Wetter ac49e2e12b Remove engine problem line
as it may contain the openssl path
2025-05-08 19:15:56 +02:00
Dirk 2557d2151b Add line 2025-05-08 18:49:51 +02:00
Dirk 35743166cd Clarify what Android handshake (best) is 2025-05-08 17:21:19 +02:00
Dirk 55980c59c3 Add Android 15 handshake 2025-05-08 17:20:15 +02:00
Dirk Wetter a9d469d12a renumber tests properly 2025-05-08 14:44:33 +02:00
Dirk Wetter ee90ec688d Merge branch '3.2' into mac_runner 2025-05-08 14:34:59 +02:00
Dirk Wetter e91b8c7339 reran ~/utils/create_ca_hashes.sh 2025-05-08 14:30:42 +02:00
Dirk Wetter 17acd2a256 Better phrasing 2025-05-08 14:30:13 +02:00
Dirk Wetter 916d607e5b Number each check 2025-05-08 14:18:30 +02:00
Dirk Wetter f9e9443cac Number each check / make it work under MacOS 2025-05-08 14:17:01 +02:00
Dirk Wetter 05818928a0 Number each check / make it work under MacOS 2025-05-08 14:13:01 +02:00
Dirk Wetter 130da03b35 version banner of different binaries 2025-05-08 13:58:31 +02:00
Dirk Wetter 8738b48e86 cpnam 2025-05-08 13:34:56 +02:00
Dirk Wetter 24e045e540 yamllinting... 2025-05-08 13:33:00 +02:00
Dirk Wetter b89a6bd936 make it better 2025-05-08 13:22:45 +02:00
Dirk Wetter 4e24fcb31c rename 2025-05-08 13:15:51 +02:00
Dirk Wetter 578c179211 Testing whether macos=14 works and is for free 2025-05-08 13:10:55 +02:00
Dirk WetterandGitHub 927a274e95 Merge pull request #2760 from ssupdoc/fix_2759
Uses tolower() utility for hostname conversion
2025-05-08 12:38:29 +02:00
Dirk WetterandGitHub 760781068d Merge pull request #2758 from polarathene/patch-2
ci: `Dockerfile` - Support local and git builds with the openSUSE Leap image
2025-05-08 11:25:30 +02:00
Dirk WetterandGitHub 5719fccc93 Merge pull request #2757 from sullo/3.2
Lowercase URL to match 'HTTPS://<server>/'
2025-05-06 09:51:06 +02:00
Dirk WetterandGitHub 70fd83f6a9 Merge pull request #2756 from testssl/docker_alpine
Change filename to -alpine / upgrade Ubuntu
2025-05-05 22:08:17 +02:00
Dirk f09f742ee3 fix gh action
Not sure why this has been triggered though.

 #   Failed test 'Check whether CSV output matches baseline file from testssl.sh'
 #   at t/61_diff_testsslsh.t line 57.
 #
 # %s
 # @@ -1,5 +1,4 @@
 #  "id","fqdn/ip","port","severity","finding","cve","cwe"
 # -"engine_problem","/","443","WARN","No engine or GOST support via engine with your ./bin/openssl.Linux.x86_64","",""
 #  "service","testssl.sh/81.169.166.184","443","INFO","HTTP","",""
 #  "pre_128cipher","testssl.sh/81.169.166.184","443","INFO","No 128 cipher limit bug","",""
 #  "SSLv2","testssl.sh/81.169.166.184","443","OK","not offered","",""
 # Looks like you failed 1 test of 1.
 t/61_diff_testsslsh.t ..............
2025-05-05 20:11:12 +02:00
Dirk 74a261d2f0 remove file 2025-05-05 13:25:25 +02:00
Dirk 84da656683 Change Dockerfile.git to -alpine / upgrade Ubuntu 2025-05-05 13:24:57 +02:00
Dirk 286bc150db rename file 2025-05-05 13:23:06 +02:00
Dirk 1400c7875d Change filename to -alpine / upgrade Ubuntu 2025-05-05 13:16:41 +02:00
Dirk WetterandGitHub 252cee6207 Merge pull request #2752 from polarathene/patch-1
refactor: Docker (Alpine) improvements
2025-05-05 12:15:08 +02:00
Dirk WetterandGitHub 3a9746ccc5 Merge pull request #2749 from testssl/revert-2748-docker.ghcr
Revert "Trying to use the regular Dockerfile ...."
2025-04-25 18:45:41 +02:00
Dirk WetterandGitHub f00af62d9b Revert "Trying to use the regular Dockerfile ...." 2025-04-25 18:22:14 +02:00
Dirk WetterandGitHub 3fd3470e49 Merge pull request #2747 from testssl/dependabot/github_actions/docker/build-push-action-6.16.0
Bump docker/build-push-action from 6.15.0 to 6.16.0
2025-04-25 18:19:21 +02:00
Dirk WetterandGitHub 81e28b9a96 Merge pull request #2748 from testssl/docker.ghcr
Trying to use the regular Dockerfile ....
2025-04-25 17:43:50 +02:00
Dirk 2a428f1871 Trying to use the regular Dockerfile ....
.. for GHCR.

See comment https://github.com/testssl/testssl.sh/issues/2348#issuecomment-2828960763
from @polarathene.

Probably the Dockerfile.git is not in use but I'd rather wait before removing it.
2025-04-25 16:18:22 +02:00
Dirk WetterandGitHub 06ba579475 Merge pull request #2742 from testssl/bump_version
Prepare for upcoming release
2025-04-23 11:33:39 +02:00
Dirk WetterandGitHub 51a21cb5f1 Merge pull request #2744 from testssl/fix_imagebuild
Remove redundant commands in Dockerfile
2025-04-23 11:07:23 +02:00
Dirk 622fe3f7b1 fix typos 2025-04-22 17:48:32 +02:00
Dirk ca57914bd0 Reflect release status in Readme.md
... and amend / rearranged a few sentences
2025-04-22 17:45:56 +02:00
Dirk WetterandGitHub a9a1295875 Merge pull request #2745 from testssl/amend_changelog_and_credits
Amend changes and attributions
2025-04-22 16:50:53 +02:00
Dirk 4d10873727 Amend changes and attributions 2025-04-22 16:47:54 +02:00
Dirk WetterandGitHub 58da779a8e Merge pull request #2721 from testssl/fix_some_ipv6proxy_issues
Fix some ipv6proxy issues
2025-04-22 15:05:05 +02:00
Dirk e30b558860 Remove redundant commands
.. see https://github.com/testssl/testssl.sh/issues/2420#issuecomment-1762749767

As suggested by @polarathene the not needed repos are more elegantly removed,
commands for removing util-linux removal and zypper up were redudant and thus
squashed.

First stage was build manually and it looked fine.

This fixes #2439 .
2025-04-22 13:28:30 +02:00
Dirk ffe5dea844 remove misleading command 2025-04-22 12:55:42 +02:00
Dirk b4cdc37f9e trailing zero sounds better / is more distinguishable 2025-04-22 12:47:48 +02:00
Dirk 295a68e7ab Just bump version for upcoming release 2025-04-18 13:32:53 +02:00
Dirk WetterandGitHub 6746fa54b8 Merge pull request #2740 from testssl/update_CAs
Update CA stores for 3.2
2025-04-18 13:17:50 +02:00
Dirk d1440d646d For better autoselction w mouse move comma 2025-04-17 18:50:48 +02:00
Dirk 668b98c9ce remove DST Root CA X3.txt 2025-04-17 18:41:44 +02:00
Dirk 3dad99a93a Update Java, Apple and MS store
- Java is from JDK 21
- Apple and MS from this week
2025-04-17 18:39:02 +02:00
Dirk 41c3110c0e Update Linux and Mozilla CA store
- Linux: Debian 12
- Mozilla from 2025-02-25
2025-04-17 18:03:50 +02:00
Dirk WetterandGitHub 128d8b5997 Merge pull request #2731 from testssl/new_Handshakes
Update handshakes
2025-04-17 16:13:31 +02:00
Dirk ebb7cf558e Update handshake 2025-04-16 21:48:30 +02:00
Dirk 81e4856b79 fix typo 2025-04-16 21:35:27 +02:00
Dirk 4a2228f401 Updating Android handshakes
- Android 13 and 14 were added. They are the same, see ja3 + ja4 value
- as it turned out Android 11 and 12 have also the same ja3 + ja4 values (retrieved from old pcap files)
- so both will be labeled 11/12 an 13/14
- old pcaps from Android 11/12 showed no ALPN --> corrected
2025-04-16 21:28:08 +02:00