Commit Graph

847 Commits

Author SHA1 Message Date
Dirk f203b8b299 - Fix #46 (preload lists HPKP and HSTS)
- word match for includeSubDomains (useful if one specified the keyword wrong)
2015-02-15 13:37:44 +01:00
Dirk b0a40ae1e8 - FIX #60: mod_security CRS doesn't complain anymore 2015-02-15 13:14:11 +01:00
Dirk ab48c66f74 - certificate sha2 fingerprint added (#59, @@kyhwana)
- sha1 fp: removed colons as long serials after it look ugly (lf)
2015-02-15 12:58:51 +01:00
Dirk e5a015b842 - workaround for issue #58, same in http_header
- FIX: if a web site returned IMAP e.g. in HTML code it may have led to the assumption IMAP is the service ;-/
2015-02-13 16:01:46 +01:00
Dirk d15d5b0c6f - FIX regression: CRIME check
- FIX: port ended up sometimes as URL part
- also if it runs http a line is displayed as confirmation that HTTP was detected
2015-02-12 13:40:53 +01:00
Dirk db99cc8c0c - new build with proper banner string 2015-02-12 11:12:49 +01:00
Dirk Wetter 7d6adee53f Update Readme.md 2015-02-12 10:50:52 +01:00
Dirk Wetter bc1cf841e3 Update Readme.md 2015-02-12 09:45:26 +01:00
Dirk d9e4873fda - WORKAROUND for bug in PeterMosmans OPENSSL chacha/poly version: not testing EXPORT40/EXPORT then 2015-02-12 09:32:47 +01:00
Dirk d98aa626e7 - NEW: check for Secure Client-Initiated Renegotiation
- debugging #1: PS4 and debugme
- debugging statement tmpfile_handle where missing #2
2015-02-11 09:43:04 +01:00
Dirk Wetter c80fc50728 Update Readme.md 2015-02-10 13:18:02 +01:00
Dirk d4c3266486 - sha2 like mozilla 2015-02-10 12:43:08 +01:00
Dirk 32ca73f982 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-02-10 12:40:14 +01:00
Dirk Wetter d5c4aca6f0 Update Readme.md 2015-02-10 12:39:54 +01:00
Dirk Wetter 30b7390654 Update Readme.md 2015-02-10 12:39:20 +01:00
Dirk Wetter bbb832ae59 Update Readme.md 2015-02-10 12:39:02 +01:00
Dirk 1e75ac8be3 - vanilla as a workaround for bug #38 2015-02-10 12:37:03 +01:00
Dirk Wetter 80c21abcac Update Readme.md 2015-02-10 12:34:35 +01:00
Dirk Wetter f47b589fe9 Update Readme.md 2015-02-10 12:20:59 +01:00
Dirk Wetter 76ad830d1a Update Readme.md 2015-02-10 12:00:02 +01:00
Dirk Wetter 2272a34557 Update Readme.md 2015-02-10 11:59:47 +01:00
Dirk ed04b636da - starttls for ldap now also supported 2015-02-09 14:02:02 +01:00
Dirk Wetter 0b23307683 Merge pull request #57 from schuetzm/patch-1
Trivial typo fix
2015-02-09 13:52:11 +01:00
Marc Schütz 4fc8111c0a Trivial typo fix
noone => none
2015-02-07 17:30:36 +01:00
Dirk Wetter 857880218d Update Readme.md
Bug #38
2015-02-05 10:06:27 +01:00
Dirk Wetter 2b35b66551 Delete openssl32-1.0.2pm.chacha+poly 2015-02-05 10:02:54 +01:00
Dirk 82410b7214 - updated to 1.0.2 stable from pm
- still bug #38: https://github.com/drwetter/testssl.sh/issues/38
2015-02-05 09:58:33 +01:00
Dirk bbec58bb02 Merge branch 'master' of github.com:drwetter/testssl.sh
Conflicts:
	openssl-bins/openssl-1.0.2-chacha.pm/openssl32-1.0.2pm-krb5.chacha+poly.asc
	openssl-bins/openssl-1.0.2-chacha.pm/openssl64-1.0.2pm-krb5.chacha+poly.asc
2015-02-05 09:54:24 +01:00
Dirk 6b1d5a732b - updated to 1.0.2 stable from pm
- still bug #38: https://github.com/drwetter/testssl.sh/issues/38
2015-02-05 09:48:42 +01:00
Dirk Wetter c4a5caadbc Delete openssl64-1.0.2pm.chacha+poly.asc 2015-02-05 09:48:28 +01:00
Dirk Wetter 7340103bd8 Delete openssl64-1.0.2pm.chacha+poly 2015-02-05 09:48:17 +01:00
Dirk Wetter aeeb63c694 Delete openssl64-1.0.2pm-krb5.chacha+poly.asc 2015-02-05 09:48:05 +01:00
Dirk Wetter ef466364c3 Delete openssl32-1.0.2pm.chacha+poly.asc 2015-02-05 09:47:55 +01:00
Dirk Wetter b7864fc05e Delete openssl32-1.0.2pm.chacha+poly 2015-02-05 09:47:43 +01:00
Dirk Wetter 3d9bbfee02 Delete openssl32-1.0.2pm-krb5.chacha+poly.asc 2015-02-05 09:47:28 +01:00
Dirk 731e5fefb4 - updated to 1.0.2 stable from pm
- still bug #38: https://github.com/drwetter/testssl.sh/issues/38
2015-02-05 09:41:56 +01:00
Dirk 711cc96172 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-02-05 09:35:26 +01:00
Dirk a41a04b36e - updated to 1.0.2 stable from pm
- still bug: https://github.com/drwetter/testssl.sh/issues/38
2015-02-05 09:33:36 +01:00
Dirk Wetter e0429cc3fe Update Readme.md
new stable 1.0.2 branch, also with 4 more ciphers
2015-02-05 09:22:01 +01:00
Dirk f30d7568e7 - checking protoype of tls sockets but not called/working yet
- small fixes $DEBUG
2015-02-04 09:48:34 +01:00
Dirk 1b8d96f1d8 - NEW: certificate fingerprints + serial 2015-02-03 23:46:47 +01:00
Dirk d2b833b2fa - TLS 1.0/1.1 is not green anymore, only TLS 1.2 is the real one!
- no bold for 3DES and medium
- nslookup for MSYS2 etc. having no hosts (and fixing error message if host doesn't exist)
2015-02-03 23:20:59 +01:00
Dirk 188e7f9095 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-01-30 16:27:27 +01:00
Dirk 4f1ca24bd2 FIX: experiration threshold < 30 days 2015-01-30 16:26:55 +01:00
Dirk Wetter 0ea64faa12 Update Readme.md 2015-01-30 10:35:07 +01:00
Dirk 85bc14c946 - FIX: STARTTLS is the criteria for using bash sslv2 or not, not the service 2015-01-29 23:24:49 +01:00
Dirk 16c804d4ca FIX: BEAST (supports higher protocols only when CBC ciphers detected)
- FIX: URL in app banner
 - cosmetic issue: display also if one cookie was issue the number 1
2015-01-29 23:20:58 +01:00
Dirk 89012a7a42 * NEW: protocol check SSLv2 in bash sockets per default (HTTP)
(fallback to openssl with SSL_NATIVE=1)
2015-01-29 10:46:16 +01:00
Dirk b2e8e0175a @nvsofts for LibreSSL patch 2015-01-29 09:34:32 +01:00
Dirk 5e864c28b4 * NEW: emphasize any numbers in http header output
* internal renaming of color functions ( --> pr_*)
* new color switches (tput)
* $COLOR is treated as integer not string
* for some issues color adjusted accordingly (red --> brown/yellow)
2015-01-29 09:33:35 +01:00