deda4c7627
Merge pull request #3080 from ericcgu/ericcgu-patch-1
...
fix: inverted return check in sym-encrypt() at testssl.sh:14741 makes …
2026-07-08 20:45:06 +02:00
044cfee81b
Merge pull request #3078 from testssl/fix_empty_httpsrr
...
Fix empty result for HTTPS_RR for Mac and friends
2026-07-08 18:24:45 +02:00
62ca07cc33
Merge pull request #3059 from TheraNinjaCat/fix-cert-trust-wildcard-identifier-3051
...
Fixed 'cert_trust_wildcard' identifier when multiple certificates are…
2026-07-08 18:24:14 +02:00
09a17c0cc1
fix: nverted return check in sym-encrypt() at testssl.sh:14741 makes the function return error 7 on every success.
...
[BUG / possible BUG] Inverted return check in sym-encrypt() at testssl.sh:14741 makes the function return error 7 on every success. The tm_out line at testssl.sh:14743 is unreachable.
#3079
2026-07-08 08:28:33 -04:00
2dba5fea1b
fix typo
2026-07-06 11:41:18 +02:00
44d6b7adbf
Fix empty result for HTTPS_RR for Mac and friends
...
... also improve error handling by adding return values in
*https_rr functions.
The error for ~Macs occured because for interpretation of
raw TYPE65 DNS data it was just 1 returned instead of 0
--for empty records.
2026-07-06 11:36:15 +02:00
36e5d3df3f
Fixed 'cert_trust_wildcard' identifier when multiple certificates are present.
2026-06-28 21:07:10 +12:00
9fdf8028ba
Merge pull request #3076 from SteveVaneeckhout/fix-ipv4-only-flag-ignored
...
Fix -4/-6 flag being ignored when no specific test is selected
2026-06-25 22:34:27 +02:00
df6cd77195
Merge pull request #3075 from lapo-luchini/3.3dev_fix_escaping
...
Fix escaping.
2026-06-23 23:15:43 +02:00
0db7ab0d49
Fix escaping.
2026-06-23 09:43:55 +02:00
56ba1ab229
Merge pull request #3047 from testssl/https_rr
...
Provide DNS HTTPS RR functionality
2026-06-22 18:16:35 +02:00
f284366aee
Auto-generate docs from testssl.1.md [skip ci]
2026-06-22 14:38:35 +00:00
859d24df20
HTTPS DNS RR in manual
2026-06-22 16:37:32 +02:00
50966dc1d6
Merge branch '3.3dev' into https_rr
2026-06-22 16:26:38 +02:00
dca6434604
Compare QUIC section with DNS HTTPS RR
...
Also: make "A(AAA) record via:" bold, to be in line with the other keys
2026-06-22 16:20:13 +02:00
7e97b243d1
Introduce global HTTPS_RR variable
...
... which is initialized with "initt" to distinguish between not being tested yet and no value.
We only display the value once per $NODE for the first IP address being tested.
HTTPS_RR doesn't have to be reset in reset_hostdepended_vars()
Few comments were added / indentation fixed (not relevant to this PR)
2026-06-22 14:59:13 +02:00
689516c378
Merge pull request #3073 from testssl/my-patch-2
...
clarify what a breaking change is
2026-06-22 13:06:55 +02:00
492882577d
clarify what a braking change is
2026-06-22 13:01:56 +02:00
8b653d0abf
Merge pull request #3072 from testssl/my-patch-1
...
AI section + minor improvements
2026-06-22 12:56:35 +02:00
a75e25a958
Minor changes
2026-06-22 12:55:45 +02:00
74ba0c4f1e
Add links
2026-06-22 12:47:24 +02:00
efab5f9165
AI section + minor improvements
...
- AI generated code becomes more important, so we add a new section (albeit bash support is not really as good as for other languages).
- streamlined comment, which is a comment
2026-06-22 12:33:11 +02:00
a55fc6d5d4
Merge pull request #3071 from testssl/potato-20-revive-hsts-preload
...
Potato 20 revive hsts preload
2026-06-20 18:34:54 +02:00
bfdfaf49a6
Merge branch 'potato-20-revive-hsts-preload' of github.com:testssl/testssl.sh into potato-20-revive-hsts-preload
2026-06-20 17:19:38 +02:00
bb408fd7d5
reflect renaming the variable
...
and u+x the script
2026-06-20 17:17:36 +02:00
050a141a71
Auto-generate docs from testssl.1.md [skip ci]
2026-06-20 14:59:08 +00:00
a13eb751ec
Credit where credits is due
...
Amend manyak
2026-06-20 16:54:30 +02:00
083f0148ca
Move --phone-out to 3.3dev
2026-06-20 16:53:36 +02:00
fda8d34edd
Minor changes to #3060 (HSTS preload)
...
- readability: case statements!
- we query the API, not the list
- safe_echo makes echo safer
2026-06-20 16:46:32 +02:00
2b00b984f9
Merge branch 'revive-hsts-preload' of https://github.com/potato-20/testssl.sh into potato-20-revive-hsts-preload
2026-06-20 16:10:52 +02:00
2a30ddc35e
Merge pull request #3069 from testssl/dependabot/github_actions/actions/checkout-7
...
Bump actions/checkout from 6 to 7
2026-06-20 15:56:44 +02:00
c93ad06489
Bump actions/checkout from 6 to 7
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-19 00:22:25 +00:00
8d0f86eada
Merge pull request #3066 from logopk/fix/issuer-cn-linecount
...
[Bug] FIXME: issuer_CN error with more than 5 lines in Issuer #3065
2026-06-18 11:29:47 +02:00
53d0125b44
Merge pull request #3068 from testssl/dependabot/github_actions/actions/checkout-6
...
Bump actions/checkout from 4 to 6
2026-06-18 09:51:44 +02:00
7a5bdd80b9
Bump actions/checkout from 4 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-18 00:22:31 +00:00
bdeff4d23b
[Bug] FIXME: issuer_CN error with more than 5 lines in Issuer #3065
2026-06-17 22:35:32 +02:00
391f6a6b2b
ui: replace raw API value 'unknown' with 'no entry' in HSTS preload output
2026-06-17 15:10:51 +05:30
57fc5850d1
Add HSTS preload list check via the hstspreload.org API ( #1248 )
...
Revives and rebases #1809 by @tosticated (Jim Blankendaal) onto 3.3dev. When --phone-out is set, run_hsts now queries https://hstspreload.org/api/v2/status and reports whether the domain is on the browser HSTS preload list (preloaded/pending/rejected/unknown), cross-referenced with the served header, the same-domain check and the bulk flag.
Addresses the review comments on #1809 : the API-response matching uses native bash string matching instead of forking grep, the JSON quoting is handled inside check_hsts_preloadlist_match() so callers pass plain values, and the value arrays use 'local -a'. The output decision table is kept as-is (per maintainer feedback). Adds t/53_hsts_preload.t. Original design and decision table by @tosticated.
2026-06-17 15:10:51 +05:30
826449115c
Merge pull request #3064 from testssl/automate_pandoc
...
Automate pandoc
2026-06-17 11:24:25 +02:00
f8c23ab69f
Auto-generate docs from testssl.1.md [skip ci]
2026-06-17 09:22:17 +00:00
2dc81417f6
git push
2026-06-17 11:21:31 +02:00
85f80a6487
change template name
2026-06-17 11:12:53 +02:00
1297c88d26
fix syntax error
2026-06-17 11:08:24 +02:00
8fd171783c
Correct dir name, autopush gnerated files
2026-06-17 11:05:47 +02:00
4f874b3ebf
should better run on PR
2026-06-17 10:51:38 +02:00
1d6045ccd8
Add workflow for pandoc
2026-06-17 10:43:05 +02:00
0359a363ae
Change title --> trigger pandoc
2026-06-17 10:41:49 +02:00
1f9e61afbc
Fix CI runner for Mac
2026-06-16 13:15:11 +02:00
913bf1406d
Save work
...
- parsing output from old dig versions (Mac) works for almost every svc_key
- for old dig versions: double lined RR work (but output is not nice yet)
- cleaned up comments
- separate function https_rr_raw_parser()
- commented output from claude.ai for ech for later interpretation
- get_mx_record() has a warning when get_https_rrecord returned != 0
2026-06-16 11:00:14 +02:00
e0af44a7be
Merge pull request #3058 from testssl/debug_hooks
...
Provide better debugging means for GH runners
2026-06-10 14:11:14 +02:00
Dirk Wetter