Frank Breedijk
d14badfd3c
Protocol detection fix for openssl client simulation
...
New approach: try every protocol individually from high to low and stop as soon as one works
2016-06-27 13:26:15 +02:00
Frank Breedijk
bba9905e62
Sockets for STARTTLS. Non HTTP(s) client simulations. Apple mail clients added.
...
In this commit clients are also tested when non-HTTP protocols are used. Each client
now has a line that indicates what services the client can handle. Clients that match
the current SERVICE tested or have service ANY (OpenSSL/Java) will be simulated, others
will be ignored.
I have removed the STARTTLS restriction from using sockets because sockets seem to handle
starttls just fine.
Update client SIM data has been updated to add two client we maintain ourselves:
* Mail on iOS
* Mail on OSX
* Thunderbird on OSX
2016-06-27 11:31:15 +02:00
Frank Breedijk
4aba0b90bf
Merge branch 'client_sim_sockets' of https://github.com/dcooper16/testssl.sh into client_sim_sockets
2016-06-27 08:40:38 +02:00
Frank Breedijk
a73caa930a
Parsing more information from SSL Labs
2016-06-23 16:55:29 +02:00
Dirk
6eedd5747f
wrong language fix ;-)
2016-06-23 11:13:11 +02:00
Dirk
6efc3e90f5
includes IPv6 check and is ready for other uname's
2016-06-23 11:04:58 +02:00
Frank Breedijk
cf8b2f01f2
The results of using sockets and using openSSL now match perfectly
2016-06-21 10:17:46 +02:00
Frank Breedijk
ca937d3b72
Client Simulations moved to external file
...
parse_client_ciphers now gets the results from the SSL labs API
Wrote a parse to conver wireshark SSL Handshake ciphers lists to openssl cipher lists
2016-06-20 16:52:49 +02:00
Dirk
7b0fabdbc4
- making the read buffer for server hello bigger+variable
2016-03-08 10:38:21 +01:00
Frank Breedijk
ab47f8ada9
Added client simulations based on @ivanr s list on ssllabs
2016-01-13 10:21:01 +01:00
Dirk
8d65c67d50
- cleanup bin mess ;-), part 1
2015-09-03 12:39:03 +02:00
Dirk Wetter
fef9afe288
* protocol checks work now!
...
* generic jabber support now!
* jabber domain support
2015-07-06 22:04:07 +02:00
Dirk Wetter
d1442d8ca9
don't need it
2015-07-06 22:03:41 +02:00
Dirk
1186bf4229
- try to interpret server protocol (SMTP, FTP,...) handshake
2015-07-01 19:50:38 +02:00
Dirk
39a0da31e5
- echo host:port
2015-07-01 19:48:33 +02:00
Dirk
d44cff9a81
Merge branch 'master' of github.com:drwetter/testssl.sh
2015-07-01 18:51:18 +02:00
Dirk Wetter
c2f8e23441
Rename ccs-injection.sh to ccs-injection.bash
2015-07-01 18:50:45 +02:00
Dirk
21119d6d01
works also for nntp,ftp,imap,pop,xmpp +starttls now
2015-07-01 13:01:16 +02:00
Dirk
83dc3f707f
- works now also for SMTP+STARTTLS
2015-07-01 10:16:01 +02:00
Dirk Wetter
bfdc95f3dc
Rename bash-heartbleed.changelog.txt to heartbleed.bash.changelog.txt
2015-07-01 10:12:03 +02:00
Dirk Wetter
4363229a01
Rename bash-heartbleed.sh to heartbleed.bash
2015-07-01 10:11:20 +02:00
Dirk
bbec58bb02
Merge branch 'master' of github.com:drwetter/testssl.sh
...
Conflicts:
openssl-bins/openssl-1.0.2-chacha.pm/openssl32-1.0.2pm-krb5.chacha+poly.asc
openssl-bins/openssl-1.0.2-chacha.pm/openssl64-1.0.2pm-krb5.chacha+poly.asc
2015-02-05 09:54:24 +01:00
Dirk
44d8f67998
SNI is not anymore 2do (removed misleading comment)
2015-01-12 23:28:38 +01:00
Dirk
84204a80a3
debugging more fine grained
2015-01-12 23:15:26 +01:00
Dirk
ac6a67a299
now with SNI!
2015-01-12 22:56:15 +01:00
Dirk
f0747dd2fc
now checker fo SSLv3 to TLSV1.2
...
(SNI missing for now)
2015-01-10 22:08:11 +01:00
Dirk
446f7bf152
working prototype for SSLv2 client hello + parsing server hello in bash
2015-01-07 23:57:16 +01:00
Dirk
5044412f39
- moved utils to separate dir
2015-01-07 23:29:05 +01:00