Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,833 Commits 16 Branches 39 Tags
dc629202bba37bcb3ef8af345eef2378a28aee61
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk WetterandGitHub dc629202bb Merge pull request #701 from dcooper16/wordsplitting_filenames 
Handle word splitting of log file names.
 2017-04-07 08:54:07 +02:00
Dirk WetterandGitHub 9c13d2a3a2 Merge pull request #700 from dcooper16/fix_696 
Fix #696
 2017-04-07 08:52:38 +02:00
Dirk WetterandGitHub 46ca4b272d Merge pull request #699 from dcooper16/fix_695 
Fix #695
 2017-04-07 08:38:52 +02:00
Dirk e2f5d5c3cf updated comments 2017-04-06 11:33:54 +02:00
Dirk 3351f8832c mute the error message using bash3, see #697 (2.9dev) 2017-04-06 11:23:57 +02:00
Dirk WetterandGitHub c188408f8e Merge pull request #698 from dcooper16/mass_testing_parallel 
Mass testing in parallel
 2017-04-06 10:25:38 +02:00
Dirk 8a2967c62e make use of swapped out tls data file 
(main() sill needs a bit of work)
 2017-04-06 09:47:09 +02:00
Dirk 61d42b022c fix missing space in banner and suppress empty version string 2017-04-05 20:39:35 +02:00
Dirk ec55cdea14 "post-fix" for #697 (2.9dev) 2017-04-05 20:20:00 +02:00
Dirk bfb0f4bc7d FIX #697 in 2.9dev (bash hiccup @ tolower) 2017-04-05 17:28:06 +02:00
Dirk b1ce11d76e in addition to #694: using the predefined variable 2017-04-05 14:48:35 +02:00
Dirk 6b0f389225 fix #694 (CSP and HTTP header friends were cut off @ last colon) 
introduced strip_leading_space() / strip_trailing_space()
 2017-04-05 14:42:55 +02:00
Dirk 7549f10c79 added explanation for #692 2017-04-04 20:23:28 +02:00
Dirk WetterandGitHub c593f06f6d Merge pull request #692 from dcooper16/fix_html 
Fix HTML
 2017-04-04 20:18:05 +02:00
Dirk 8213e2436c addressed #691 for 2.9dev 2017-04-04 09:54:47 +02:00
Dirk 498dda94ce using get_san_dns_from_cert() 2017-04-01 10:38:04 +02:00
Dirk 6b601e22c7 adding Referrer-Policy header (FIX #604) 
introduced get_san_dns_from_cert()

added two stub function get_session_ticket_lifetime_from_serverhello
 2017-03-31 17:04:04 +02:00
Dirk WetterandGitHub 75c794546d Merge pull request #689 from dcooper16/run_server_defaults_cleanup 
Cleanup variable definitions in run_server_defaults()
 2017-03-31 12:53:46 +02:00
Dirk a480e5f699 count_ciphers is now un-sed'ed, minor improvements 2017-03-31 12:24:25 +02:00
Dirk WetterandGitHub 10ac0ffed4 Merge pull request #687 from dcooper16/child_mass_testing_env_variable 
Child mass testing env variable
 2017-03-31 08:44:15 +02:00
Dirk 7953bfda5e correct DEBUGTIME 2017-03-29 11:17:24 +02:00
Dirk 05ea5675b8 one line per variable type 2017-03-29 10:44:22 +02:00
Dirk WetterandGitHub 2f8bc2e77a Merge pull request #686 from dcooper16/out_row_aligned_max_width 
out_row_aligned_max_width()
 2017-03-29 10:39:04 +02:00
Dirk 53de1dc7c4 clarified help() 2017-03-28 12:07:45 +02:00
Dirk e2d5dc7778 part 2/2: fix for #653 2017-03-27 21:31:54 +02:00
Dirk WetterandGitHub 7df453c7f3 Merge pull request #683 from dcooper16/missing_html_banner 
Missing HTML banner
 2017-03-27 21:12:35 +02:00
Dirk 38cf16854d FIX #682 2017-03-27 17:35:45 +02:00
Dirk bcc597dbab clarify help #680 2017-03-27 11:37:18 +02:00
Dirk c0af8b113f FIX #680 2017-03-27 11:29:21 +02:00
Dirk 7543aa30fb make travis mute again / introduce DEBUG_ALLINONE to use script for debug output all in one file 2017-03-27 08:59:29 +02:00
Dirk 9f1877b192 save work (still double footer, see #653) 2017-03-27 00:54:38 +02:00
Dirk a8b2dfec40 allow '=' after --htmlfile 2017-03-27 00:34:42 +02:00
Dirk 13ba1ce966 partly (1/2) fixing #653 2017-03-27 00:30:42 +02:00
Dirk c281956f6e ifix xtrace 2017-03-26 19:34:02 +02:00
Dirk e268a1564a * include runtime per default in "Done" banner 
* enable better performance analysis
* minor polish
 2017-03-25 19:37:30 +01:00
Dirk 10bbbd9334 minor cleanups 2017-03-25 13:23:21 +01:00
Dirk WetterandGitHub 039b293790 Merge pull request #679 from dcooper16/std_cipherlists_debug 
Fix std_cipherlists with debug
 2017-03-25 12:36:46 +01:00
Dirk 4ae1597b2b FIX #543 2017-03-25 12:26:08 +01:00
Dirk WetterandGitHub edaffc85ec Merge pull request #674 from dcooper16/fix_client_simulation 
Fix client simulation
 2017-03-24 18:45:40 +01:00
Dirk WetterandGitHub 3514c9d98d Merge pull request #672 from dcooper16/minor_bugs 
Fix two minor bugs
 2017-03-24 08:00:33 +01:00
Dirk WetterandGitHub 3879338040 Merge pull request #670 from dcooper16/client_sim_name_printing 
Use printf to print browser names
 2017-03-24 07:52:54 +01:00
Dirk d5bb4edd80 * FIX #654 (no logfile when -file is specified) 
* filename has now instead of just the number p+#
* minor polishing
 2017-03-23 16:36:29 +01:00
Dirk WetterandGitHub 0d511e40e4 Merge pull request #669 from dcooper16/extract_tls_extensions 
Cleanup extraction of TLS extensions
 2017-03-23 08:56:13 +01:00
Dirk 43463da4fc improvements for performance measurements (small solution) 
- in gerneral better performance measurements , starts from the real beginning (almost)
- allows results to put into file (MEASURE_TIME_FILE=google.txt testssl.sh google.com)
 2017-03-22 16:02:48 +01:00
Dirk 27d0570fb5 - changed performance debugging options (small solution) so that the last delta is being shown 
- PS4 improved: has now a performance debugging options (big solution)
- PS4 with proper alignment
- SCAN_TIME is now global so that it can be used not only by JSON-PRETTY (small performance debugging options uses it)
- prepare_debug() has now debugging stuff only, rest went to prepare_arrays()
 2017-03-21 12:44:03 +01:00
Dirk 8c0b0083d0 further separation of data / code 2017-03-21 09:15:30 +01:00
Dirk 273361fbb9 raw time assements via env var MEASURE_TIME=true 2017-03-20 22:53:18 +01:00
Dirk 60a8e0a190 monor resorting and cosmetic improvements 2017-03-19 09:47:49 +01:00
Dirk bb5b778ee1 update/resort 2017-03-19 09:36:19 +01:00
Dirk 73a094fcc7 FIX #648 (retrieve cipher and protocol from ServerHello) --> saves ~1 second and makes code better to read 
other readabilty improvements
 2017-03-18 22:24:35 +01:00
Dirk 8be47e484b replace some "echo $x" by HERE statement "<<<" 2017-03-18 21:01:55 +01:00
Dirk c618b9a954 fix CR for standard cipherlists with debug=1 2017-03-18 16:09:22 +01:00
Dirk 21a51b4ff0 Merge branch '2.9dev' of github.com:drwetter/testssl.sh into 2.9dev 2017-03-18 15:58:30 +01:00
Dirk 407c4383bf - externalized client simulation data 
- fixed  *_fixme()
 2017-03-18 15:57:16 +01:00
Dirk WetterandGitHub 4a6c7de3b7 native HTML support 2017-03-18 15:07:02 +01:00
Dirk WetterandGitHub 30e68311fc Merge pull request #658 from AlGreed/2.9dev 
Fixed #657: Severity flag for JSON-PRETTY produces malformad JSON object
 2017-03-18 13:12:40 +01:00
Dirk WetterandGitHub 9d06b1a0f5 Merge pull request #665 from drwetter/2.9dev_html 
merge 2.9dev_html into 2.9dev
 2017-03-18 13:04:42 +01:00
Dirk 84a4fafe1e fixed merge conflicts 2017-03-18 12:54:01 +01:00
Dirk WetterandGitHub 71f446b170 Merge pull request #662 from dcooper16/normalize_ciphercode_html 
Speedup normalize_ciphercode()
 2017-03-17 21:20:12 +01:00
Dirk WetterandGitHub 1c9670857b Merge pull request #661 from dcooper16/normalize_ciphercode 
Speedup normalize_ciphercode()
 2017-03-17 21:19:23 +01:00
Dirk WetterandGitHub c148a93361 Merge pull request #656 from dcooper16/show_finding 
Add spaces in show_finding()
 2017-03-17 17:39:34 +01:00
Dirk WetterandGitHub 939b6f0cb9 Merge pull request #652 from dcooper16/html_headers_and_footers 
Fix HTML headers and footers
 2017-03-02 09:38:35 +01:00
Dirk WetterandGitHub 20f29fd780 Merge pull request #651 from dcooper16/html_reserved 
Handle HTML reserved characters in headers
 2017-03-01 09:40:42 +01:00
Dirk ca6cb0bf81 updated from #632 from dcooper16/negotiated_cipher 2017-02-28 18:33:17 +01:00
Dirk WetterandGitHub 27aa25711d Merge pull request #632 from dcooper16/negotiated_cipher 
Negotiated cipher per proto bugfix
 2017-02-28 15:42:28 +01:00
Dirk 79a8a02328 adding spring boot header detection 2017-02-27 19:16:29 +01:00
Dirk ac193a8ef0 adding spring boot header detection 2017-02-27 19:12:59 +01:00
Dirk WetterandGitHub 84d142a6cf Merge pull request #650 from dcooper16/emphasize_stuff_in_headers 
Redo emphasize_stuff_in_headers()
 2017-02-27 17:33:46 +01:00
Dirk WetterandGitHub 854e55e15b Merge pull request #649 from dcooper16/PR_646 
Merge PR #646 into 2.9dev_html
 2017-02-27 16:38:59 +01:00
Dirk 2232929bc5 Polish #646 
"=~" doesn't need quotes if there's a text string one wants to match against (and shellcheck complains
about this)

pr_magenta shouldn't be used anymore as the logic what color we use should be done
some place else.
 2017-02-27 13:43:23 +01:00
Dirk WetterandGitHub f7c3139545 Merge pull request #646 from dcooper16/rfc-only 
Add option to print only the RFC cipher names
 2017-02-27 13:30:11 +01:00
Dirk 4727a69a62 fixed segfaults 2017-02-25 17:15:18 +01:00
Dirk 8d66786e42 Just saving my workJust saving my work ... 
This branch is for getting the HTML patch from @dcooper16 into 2.9dev

Change to David's PR:
* removed HTMLHEADER. We always want that (in fact for flat JSON this is missing and needs to be added)
* not sure what this change does to --file
* changing of names  They were redundant sometimes (pr_*_term )
* some formatting for readbility

Open points:
* there's a loop and a segfault --> tm_done_best
* HTMLHEADER: --file
* the former sed statement aroung L1900 for the header was way more readable. The combined
  html+terminal version is just too much. Maybe a switch whether HTML is requested
  is better so that this can be separated.
  * Then e.g. "<span style=\"color:olive;font-weight:bold" can be kept in a variable
  * any reason we need the text length here?
* what went into main here is too much. Actuallly what I put already in there bothered
  me as too much logic and not obvious dependencies are in here. Now it's worse :-)
  Can't this be just similar to JSON or CSV -- a seperate function with hooks
  not in main()?
* minor thing: TERM_WIDTH is for HTML is maybe not the best. But that can be
  tackled later
 2017-02-25 16:31:30 +01:00
Dirk b10942a92e Merge branch 'generate_html' of https://github.com/dcooper16/testssl.sh into dcooper16-generate_html 2017-02-25 12:21:33 +01:00
Dirk WetterandGitHub 1072e41b0b Merge pull request #647 from gniltaws/2.9dev 
Add missing herestring redirect (<<<) in find_openssl_binary function
 2017-02-24 23:06:20 +01:00
Dirk WetterandGitHub ca18433959 Update README.md 2017-02-24 17:55:20 +01:00
Dirk Wetter 3f0a98b635 Generated from utils/update_client_sim_data.pl and manually massaged ;-) 
Note that the internal data from testssl.sh will disappear
 2017-02-24 17:45:23 +01:00
Dirk Wetter e7e9a3ed66 addressing #645 before #554 has been addressed 2017-02-24 16:26:22 +01:00
Dirk Wetter 4361bb7cce housekeeping/ cleanup 2017-02-24 16:22:59 +01:00
Dirk b4f59e91be FIX #621 2017-02-23 17:19:52 +01:00
Dirk WetterandGitHub 8919b419e5 Merge pull request #642 from dcooper16/wrap_long_lines 
Wrap long lines in display_rdns_etc()
 2017-02-21 22:51:24 +01:00
Dirk WetterandGitHub 6457775b5f Merge pull request #644 from dcooper16/fix643 
Fix issue #643
 2017-02-21 22:46:34 +01:00
Dirk be079acb5e - collect more TLS extensions 2017-02-21 11:16:14 +01:00
Dirk 34053e27cd Merge branch '2.9dev' of github.com:drwetter/testssl.sh into 2.9dev 2017-02-21 08:50:46 +01:00
Dirk 0ce7a3b7d2 see diff ;-) 2017-02-21 08:50:09 +01:00
Dirk WetterandGitHub 6b90152f52 Merge pull request #639 from dcooper16/must_staple 
OCSP must staple
 2017-02-20 12:31:16 +01:00
Dirk WetterandGitHub 52a0d44b90 Merge pull request #637 from dcooper16/print_negotiaed_cipher 
Printing Negotiated cipher
 2017-02-20 11:46:24 +01:00
Dirk bfbaba4ea7 - trying to address #640 . Better a bit pessimistic here... 2017-02-20 09:44:52 +01:00
Dirk c284185c56 - try to address #638 2017-02-18 13:22:17 +01:00
Dirk d2cbbaf0b1 - FIX #636 
- polish
 2017-02-16 19:10:59 +01:00
Dirk WetterandGitHub a973386c0a Merge pull request #635 from dcooper16/run_protocols_bugfix 
run_protocols() bug fix
 2017-02-15 19:44:53 +01:00
Dirk c204a0b942 --proxy=auto takes now the value from https_proxy 
- made DNS lookups safe (CNAME) and awk'd them almost completely ;-)
- invocation of just testssl.sh shows help again
 2017-02-15 19:40:06 +01:00
Dirk WetterandGitHub 502601c95e Merge pull request #633 from k0ste/2.9dev_newfeature 
DNS CAA: drill query support.
 2017-02-15 14:01:36 +01:00
Dirk 4b193119b3 - made CCS I more robust, FIX #313 
- removed cats ;-) FIX #352
 2017-02-14 21:56:31 +01:00
Dirk 422171a0fa - fixed bug where terminal width was not inherited in file batch mode so that terminal wdith appeared to be 80 chars 
- hint when URI is missing
- PFS_CIPHERs rather locally
 2017-02-14 20:40:38 +01:00
Dirk a22e4e5228 - fix heartbleed detection which sometimes case false psoitives over slow connections like sattelite links, partially addressing #352 
- start revamping run)ccs_injection
- fix missing space in BEAST after protocol
 2017-02-14 19:45:14 +01:00
Dirk WetterandGitHub 67fb3feff8 Merge pull request #630 from dcooper16/show_rfc_ 
Option to show RFC cipher names
 2017-02-14 09:28:15 +01:00
Dirk WetterandGitHub 971c8e8b63 Update Readme.md 2017-02-13 09:33:50 +01:00
Dirk WetterandGitHub c252d5ab28 Update Readme.md 2017-02-13 09:33:03 +01:00
Dirk 7d6f1eb46f polishing #628, mostly make sure we automatically align to terminal width 2017-02-13 09:06:10 +01:00