Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-10-30 21:35:26 +01:00
Code Issues Packages Projects Releases Wiki Activity
5,028 Commits 17 Branches 35 Tags
da6ec2f695a1f17f3b3e9d2e247346b8043b0a44
Commit Graph

5028 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk Wetter
da6ec2f695 Merge branch '3.2' into 3.3dev 2025-06-23 20:31:40 +02:00
Dirk Wetter
5fe854b830 Merge pull request #2809 from testssl/improve_2798 
Minor improvements to #2798
 2025-06-23 20:29:27 +02:00
Dirk Wetter
4d75527a4b Merge pull request #2808 from testssl/fix_sectigo_x46.forLinux 
Add sectigo CA E46 and R46 for Linux.pem
 2025-06-23 20:29:07 +02:00
Dirk Wetter
c9a11a9fb0 Minor improvements to #2798 
see https://github.com/testssl/testssl.sh/pull/2798#issuecomment-2972834180
 2025-06-23 18:43:34 +02:00
Dirk Wetter
71f0f32cf5 Merge pull request #2798 from secinto/3.2 
Modify grading for incomplete chain. 

suggested corrections will be done after merge
 2025-06-23 18:41:00 +02:00
Dirk Wetter
b4f9e51865 Add lf so that gh action doesn't complain 2025-06-23 18:21:44 +02:00
Dirk Wetter
1403503077 Add Sectigo x46 CAs from recent Debian update 2025-06-23 18:20:14 +02:00
Dirk Wetter
81471c3a22 Merge pull request #2805 from testssl/readme_3.3dev 
Reflect that this is 3.3dev
 2025-06-15 09:48:31 +02:00
Dirk Wetter
aa7d0f4311 typo 2025-06-15 09:47:23 +02:00
Dirk Wetter
7cc605aeaf Reflect that this is 3.3dev 
A branch at Docker.io needs to be created, thus that section is commented out.
 2025-06-15 09:42:07 +02:00
Dirk Wetter
a209f92d4f Merge pull request #2804 from testssl/readiness_for_new_stuff 
Reflect version 3.0.10 version is EOL
 2025-06-15 09:28:24 +02:00
Dirk Wetter
99a05cb261 Merge pull request #2801 from HarrisonTCodes/fix-readme-deepwiki-link 
Fix README DeepWiki Link
 2025-06-14 17:14:37 +02:00
Dirk
637fb86c83 typo 2025-06-14 17:11:30 +02:00
Dirk
c4ad4d7d42 Reflect version 3.0.10 version is EOL 2025-06-14 17:09:24 +02:00
HarrisonTCodes
246ecbf490 fix deepwiki link 2025-06-14 14:56:37 +01:00
secinto
529a373b2e Update testssl.sh 
Modified grading for incomplete chain
 2025-06-13 10:54:13 +02:00
Dirk Wetter
b6a951d40a Merge pull request #2797 from testssl/bump_version 
Bump version
v3.2.1 		2025-06-13 10:24:25 +02:00
Dirk
f2aa87ba66 Bump version 
"just" bugfix release.
 2025-06-12 17:26:06 +02:00
Dirk Wetter
949042866b Merge pull request #2796 from testssl/plaintext_len_AKA_openssl2conf_problem 
Fix OPENSSL_CONF problem for OPENSSL2
 2025-06-11 20:38:29 +02:00
Dirk
235a6a0f88 add another OPENSSL_CONF='' 2025-06-11 19:02:06 +02:00
Dirk
91a35026b6 Fix OPENSSL_CONF problem for OPENSSL2 
In #2727 there were workarounds introduced which sped up processing decryption of
ChaCha20 and and AES-GCM by using OPENSSL2 when it is supporting such functions.

However when OPENSSL2 is called and OPENSSL_CONF still points to the autogenerated
file which works for `~/bin/openssl.$(uname -s).$(uname -m)` the decryption `$plaintext`
will be empty which later on caused a negative value, see #2780 .

This fixes #2780 by prepending `OPENSSL_CONF=''` to each OPENSSL2 instance. Also it
makes `chacha20()` and `gcm-decrypt()` more robust. It is now more readable now.

At other places $OPENSSL2 were prepended by `OPENSSL_CONF=''` also if there weren't
any obvious errors noticed.

Also now all OPENSSL2 vars will appear in /tmp/testssl.XXXXXX/environment.txt when
debugging.

It was also noticed that the `find_socat()` function had room for improvements, it was
not set in any case when `socat was in $PATH or supplied via env SOCAT.
 2025-06-11 18:47:14 +02:00
Dirk Wetter
735cc668c0 Merge pull request #2792 from testssl/fix_issuerCN 
Fix missing issuer CN
 2025-06-11 11:13:21 +02:00
Dirk Wetter
0a89d5c94f Some cert need 5 lines to reach the CN 2025-06-11 09:06:41 +02:00
Dirk Wetter
fd6dbb22bd Merge pull request #2790 from testssl/FixServerHeaderParser 
Fix parser for server header
 2025-06-11 08:48:36 +02:00
Dirk Wetter
39029e9995 fix orthographic error 2025-06-10 23:13:00 +02:00
Dirk Wetter
61947405e0 Fix missing issuer CN 
This fixes a problem which was introduced @ 8d8f83ace5.
It caused for some hosts not to parse / display the issuer CN correctly.

Also it adds some code in testssl.sh and in a unit test to detect
this earlier. In general an output string FIXME will now cause a
unit test to fail. This can + should be used at other places too!

Fixes #2789
 2025-06-10 22:54:11 +02:00
Dirk Wetter
889aedc0e4 Fix parser for server header 
Do word match and exclude minus sign

This fixes #2787 for 3.2.
 2025-06-10 21:59:40 +02:00
Dirk Wetter
fbbf68857f Merge pull request #2785 from testssl/stderr 
Ensure that stderr is caught / $prg=testssl.sh
 2025-05-28 20:16:32 +02:00
Dirk Wetter
ba360bae7e remove extra quote sign 2025-05-28 10:21:10 +02:00
Dirk Wetter
7183bb1206 Add changed headers at target ... 
... so that runners pass
 2025-05-27 22:48:04 +02:00
Dirk Wetter
1fb3a2224f Ensure that stderr is caught / $prg=testssl.sh 
As suggested in #2780 this PR redirects all stderr on a perl level
to stdout so that we should see all errors which we miss because
we can't redirect (>/dev/null in check) or we haven't redirected yet.

Also old checks are imporved, so that $prg is used as in newer
checks.
 2025-05-27 10:54:25 +02:00
Dirk Wetter
75d8f8aa90 Merge pull request #2782 from testssl/ccsInjectionFix 
Fix CCS injection regression
 2025-05-22 00:50:04 +02:00
Dirk
0daf83cf76 fix typo 2025-05-21 14:22:13 +02:00
Dirk
cd575526a7 Fix CCS injection regression 
The rhs of the pattern was off by one byte and it worked in practise until recent PR #2657.

This fixes #2691 for 3.2 .
 2025-05-21 14:17:54 +02:00
Dirk Wetter
388f3a3321 Merge pull request #2761 from testssl/mac_runner 
PoC github action runner macos-14
 2025-05-20 17:59:19 +02:00
Dirk Wetter
a76e06f887 Polish some sentences 
... wrt to the now even better unit testing.
 2025-05-20 16:50:39 +02:00
Dirk Wetter
f8f00de5a0 Shorten name for badge 2025-05-20 16:43:06 +02:00
Dirk Wetter
d87f5f68de Sync runners / rename comments for badge 2025-05-20 16:37:48 +02:00
Dirk Wetter
ce96cc5816 Add badge for MacOS rummer 2025-05-20 16:36:29 +02:00
Dirk Wetter
7815b67695 Merge branch '3.2' into mac_runner 2025-05-20 16:31:34 +02:00
Dirk Wetter
242256bd58 Merge pull request #2778 from testssl/drwetter-patch-1 
slight rewording
 2025-05-20 12:38:42 +02:00
Dirk Wetter
81b377bda9 slight rewording 2025-05-20 12:37:57 +02:00
Dirk Wetter
d0143b181b Handle space problem 2025-05-20 10:48:54 +02:00
Dirk Wetter
85d8d44fbe Try to fix the renegotiation problem 
as suggested, see https://github.com/testssl/testssl.sh/issues/2765#issuecomment-2891140503
 2025-05-19 16:24:46 +02:00
Dirk Wetter
a685fc252d Take shorter OPenSSL cipher name into account 
AEAD-CHACHA20-POLY1305-SHA256    vs.
TLS_CHACHA20_POLY1305_SHA256
 2025-05-19 13:52:03 +02:00
Dirk Wetter
54964a9bc6 Merge pull request #2777 from polarathene/chore/consistent-dockerfile 
chore: `Dockerfile` consistency
 2025-05-19 13:10:45 +02:00
Brennan Kinney
9dc4ea338b docs: Dockerfile - Use ref links 2025-05-19 12:09:44 +12:00
Brennan Kinney
af57ec4659 docs: Docker - Minor corrections 2025-05-19 11:47:49 +12:00
Brennan Kinney
5b899958ec chore: Dockerfile - Adopt HereDoc syntax 2025-05-19 11:47:15 +12:00
Dirk Wetter
0d0c5d0ab9 Merge pull request #2771 from polarathene/ci/docker-prefer-dist-local 
ci: Docker - Prefer `dist-local` stage
 2025-05-18 16:24:43 +02:00