Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,816 Commits 16 Branches 39 Tags
defed8705b9a63ca4679063f5711d21b1543fd1d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk defed8705b Extend TLS/SSL port detection 
As mentioned in #1931 the port detection for nmap greppable files
leaves space for improvements.

Ths PR adds a pattern detection of ssl and https in the forth or fifth
parameter of an open port, so those ports will be added to a scan when
a nmap greppable output file is as input to testssl.sh .

Also it does minor code adjustments to utils/gmap2testssl.sh .
 2021-07-25 17:09:30 +02:00
Dirk WetterandGitHub 18dfa26e48 Merge pull request #1936 from drwetter/fix_1935 
Fix problem when nmap file has .txt extension
 2021-07-25 16:34:58 +02:00
Dirk b1c1d250cf Redo utils/gmap2testssl.sh 
.. mainly copied from testssl.sh. Also it adds a detection for the
strings ssl and https. If those run at non-stanadard ports but nmap
detected it, it'll show up in the output file.

That will be backported to the main program, see #1931 .
 2021-07-25 16:28:50 +02:00
Dirk 5a7b7d8b8e Fix problem when nmap file has .txt extension 
This addresses a bug filed in #1935 in 3.1dev when the supplied file
has a .txt extension. In this scenario the input file was nulled
as from the input file in nmap format an internal input file was
generated which has a .txt extension, in the same directory.
The idea was to persist the file for the user.

Now, this internal input file is ephemeral and only written to $TEMPDIR.
 2021-07-25 13:05:40 +02:00
Dirk WetterandGitHub 05d087a564 Merge pull request #1933 from drwetter/drwetter-patch-1 
Update bug_report.md
 2021-07-21 09:22:38 +02:00
Dirk WetterandGitHub 8203049154 Update bug_report.md 2021-07-21 09:22:01 +02:00
Dirk WetterandGitHub 56dcbcdc15 Merge pull request #1924 from drwetter/fix_1915 
Fix redundant message (BREACH) when client certificate required
 2021-06-22 08:25:29 +02:00
Dirk WetterandGitHub f4bb1a20e2 Merge pull request #1925 from PeterDaveHello/Add.dockerignore 
Ignore FreeBSD & macOS OpenSSL binary in Dockerfile
 2021-06-19 18:17:51 +02:00
Dirk 28d9bc483d Fix redundant message (BREACH) when client certificate required 
same as #1916.

Fixes #1915
 2021-06-19 15:27:03 +02:00
Dirk WetterandGitHub 9f0d0c0062 Merge pull request #1921 from drwetter/gha_denylist 
Github actions modifications
 2021-06-19 12:30:00 +02:00
Dirk 2af7860a3c Remove mac osx 
... apt is probably not the right thing ;-)
 2021-06-19 11:17:52 +02:00
Dirk 247d08882e GHA: Fix push + PR 
see https://github.community/t/how-to-factor-paths-in-common-for-push-and-pull-request/115967/2

TL;DR:  There is no way to specify the common paths for two events
 2021-06-19 11:12:00 +02:00
Dirk 5cd97ddcb9 Correct YAML error in GHA + add macOS 
- yamllint to the rescue. Still shows an error though:
  4:3       error    syntax error: expected <block end>, but found '<block mapping start>' (syntax)

- added macos, see https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners
 2021-06-19 10:45:08 +02:00
Dirk b8a9b9c6db Github actions modifications 
- define deny list of files when modified not to run GHA
- specRitfy OS to be ubuntu-20.04 (is there a debian at all?)
- only use perl 5.26

While researching I stumbled over mac.osx as an OS one can specify. If anybody
knows whether this is really macosx (license?) please let me know. That
would be a great addition for CI. (Couldn't find BSD yet...)

See #1920
 2021-06-19 09:20:48 +02:00
Dirk WetterandGitHub 2d3bd724fc Merge pull request #1912 from PeterDaveHello/MakeShellScriptShebangConsistent 
Make Shell Scripts' Shebang more consistent
 2021-06-18 08:59:22 +02:00
Dirk WetterandGitHub cb844557f8 Merge pull request #1913 from PeterDaveHello/CorrectExitUsage 
Correct `exit` using, the exit status should be 0~255
 2021-06-18 08:55:22 +02:00
Dirk WetterandGitHub 35c43719dd Merge pull request #1919 from drwetter/rm_travisCIhook 
Remove travis CI hook
 2021-06-18 08:47:52 +02:00
Dirk Wetter f91c0251be Rmeove travis CI hook 
.. as we're using GHA now
 2021-06-18 08:44:36 +02:00
Dirk WetterandGitHub 17b172229d Merge pull request #1909 from mikelolasagasti/gha 
Add GitHub Actions testing
 2021-06-07 09:16:31 +02:00
Dirk WetterandGitHub 7da45a81f8 Merge pull request #1905 from drwetter/tz_fix+ 
Display time as suggested in utc (3.1dev)
 2021-06-03 20:19:29 +02:00
Dirk Wetter e1be4eabd2 Display time as suggested in utc (3.1dev) 
See #1895
 2021-06-03 19:24:50 +02:00
Dirk WetterandGitHub 0da8ce02cd Merge pull request #1904 from PeterDaveHello/AddBasicEditorConfig 
Add a basic .editorconfig into project
 2021-06-01 14:26:47 +02:00
Dirk WetterandGitHub 83909dec0c Merge pull request #1903 from PeterDaveHello/MakeVimModelineConsistent 
Add missing vim modeline config in sh & perl files
 2021-06-01 11:20:33 +02:00
Dirk WetterandGitHub 737ea1e7e5 Merge pull request #1902 from PeterDaveHello/MakeVimModelineConsistent 
Make vim modeline config consistent
 2021-06-01 08:34:23 +02:00
Dirk WetterandGitHub 1d306db062 Merge pull request #1900 from PeterDaveHello/ShebangConsistency 
Make Shell Scripts' Shebang more consistent and portable
 2021-05-31 10:17:47 +02:00
Dirk WetterandGitHub 893bb98a61 Merge pull request #1898 from PeterDaveHello/FixIndentation 
Fix indentation in testssl.sh
 2021-05-31 10:16:45 +02:00
Dirk WetterandGitHub 4d62f08308 Merge pull request #1899 from PeterDaveHello/IsGitHub 
Correct "GitHub" case as it should be
 2021-05-29 21:24:58 +02:00
Dirk WetterandGitHub d41ea6c814 Merge pull request #1896 from PeterDaveHello/FixCompressionDetection 
Fix compression detection variable syntax in run_breach()
 2021-05-28 22:29:11 +02:00
Dirk WetterandGitHub 1387b4ccb4 Merge pull request #1893 from drwetter/drwetter-patch-1 
Update feature_request.md
 2021-05-16 15:24:23 +02:00
Dirk WetterandGitHub 3fea4e01e1 Update feature_request.md 2021-05-16 15:24:06 +02:00
Dirk WetterandGitHub 46ad8801de Merge pull request #1892 from drwetter/drwetter-patch-1 
Update bug_report.md
 2021-05-16 15:07:19 +02:00
Dirk WetterandGitHub 188003ea97 Update bug_report.md 2021-05-16 15:07:08 +02:00
Dirk WetterandGitHub 15ace79a4c Merge pull request #1722 from vitaliytv/patch-1 
upd alpine to 3.12
 2021-05-15 12:27:41 +02:00
Dirk WetterandGitHub 325e7380b9 Merge pull request #1888 from dcooper16/send_to_stderr 
Print errors to stderr
 2021-05-15 12:22:34 +02:00
Dirk WetterandGitHub e4807a7c9a Merge pull request #1890 from dcooper16/specify_err_code 
Specify an error code in all calls to fatal()
 2021-05-13 18:46:05 +02:00
Dirk WetterandGitHub 17ad3d70a4 Merge pull request #1882 from drwetter/epoch_180hsts_1879 
Fix "off by one" error in HSTS
 2021-05-10 12:12:39 +02:00
Dirk Wetter a6f8aa61de Fix travis 
Respect changed HSTS epoch time of 180 days.

(DROWN output is changed too as the certificated changed but doesn't matter
as the travis check filters that)
 2021-05-10 11:28:25 +02:00
Dirk WetterandGitHub 2c3589742b Merge pull request #1884 from definity/3.1dev 
fixed minor bug with json output for TLS1.1
 2021-05-09 10:56:56 +02:00
Dirk Wetter 9121c7a3c9 Fix "off by one" error in HSTS 
There was by mistake a 179 days threshold and also the error message
was wrong when HSTS was exactly set to 179 days.

This commit sets it to 180 days and corrects the error messages on
both screen and JSON.
 2021-05-08 14:45:38 +02:00
Dirk WetterandGitHub 37a6b905a5 Merge pull request #1868 from dcooper16/improve_ossl30_support 
Improve compatibility with OpenSSL 3.0
 2021-04-08 15:00:28 +02:00
Dirk WetterandGitHub ac39aa5832 Merge pull request #1865 from drwetter/fix1860_svSE_etc_charset 
Ensure certain regex patterns work as expected and aren't localized
 2021-04-04 17:46:50 +02:00
Dirk 30bafe6d4f Ensure certain regex patterns work as expected and aren't localized 
see #1860 .

This PR is trying to address an issue where probably newer bash versions
is treated differently as in other locales, W is just a variant of V
see also e.g.

https://collation-charts.org/opensolaris/opensolaris.2008.05.sv_SE.UTF-8.html
https://www.sqlservercentral.com/forums/topic/order-by-name-not-works#post-1644177
 2021-04-04 11:55:29 +02:00
Dirk WetterandGitHub 1569bded44 Merge pull request #1864 from drwetter/rhs_quotes_fix 
Fix redundant quotes at RHS of ==
 2021-04-02 18:13:57 +02:00
Dirk 2101425c59 Fix redundant quotes at RHS of == 
While looking at #1860 there were two instances where
the right hand side of expressions in a double square
bracket had quotes.
 2021-04-02 17:01:36 +02:00
Dirk WetterandGitHub 269f92dea1 Merge pull request #1863 from drwetter/fix_unittest_61_diff 
Adjust master template for t/61_diff_testsslsh.t
 2021-04-02 16:59:47 +02:00
Dirk e71ebfea4a Adjust master template for t/61_diff_testsslsh.t 
... so that Travis CI works again
 2021-04-02 16:57:20 +02:00
Dirk WetterandGitHub 88f9e07ac6 Merge pull request #1862 from vin01/3.1dev 
Add xxd to docker image
 2021-04-01 09:39:55 +02:00
Dirk WetterandGitHub f3e00738f3 Merge pull request #1861 from vin01/3.1dev 
Use locally scoped counter in hex2binary
 2021-03-31 15:43:19 +02:00
Dirk WetterandGitHub b468071d72 Merge pull request #1859 from jschauma/3.1dev 
whitespace alignment
 2021-03-25 22:13:31 +01:00
Dirk WetterandGitHub d07b6bcd2b Merge pull request #1857 from jschauma/3.1dev 
add codepoints for RFC7905, ChaCha20-Poly1305
 2021-03-25 20:58:41 +01:00
Dirk WetterandGitHub 2a6eb51e1d Merge pull request #1853 from dcooper16/cleanup_hex2binary 
Cleanup conversion from ASCII-HEX to binary
 2021-03-24 13:51:45 +01:00
Dirk WetterandGitHub 016ab0673a Merge pull request #1856 from caillou/patch-1 
Fix typo
 2021-03-21 13:24:29 +01:00
Dirk WetterandGitHub 895a6b975d Merge pull request #1851 from mbogh/patch-1 
Added GitHub Action to External/related projects
 2021-03-11 10:42:52 +01:00
Dirk WetterandGitHub 9f0e4763d3 Merge pull request #1849 from johannesschaefer/patch-1 
Add web net tools to web frontend
 2021-03-03 12:16:47 +01:00
Dirk WetterandGitHub 8b5bcd4769 Merge pull request #1847 from elfranne/patch-1 
IANA <-> Openssl mapping issue
 2021-02-25 13:46:15 +01:00
Dirk WetterandGitHub e9f73ffffd Merge pull request #1714 from dcooper16/clientauth 
Print information about certificate-based client authentication
 2021-02-08 09:22:31 +01:00
Dirk WetterandGitHub bf24c80174 Merge pull request #1837 from dcooper16/files_in_mass_testing_file 
Mass testing with CSV, HTML, JSON, and/or LOG file names in mass test…
 2021-02-04 21:00:12 +01:00
Dirk WetterandGitHub 53fc1c2a18 Merge pull request #1838 from fogs/3.1dev 
Fixed typos
 2021-01-30 10:46:17 +01:00
Dirk WetterandGitHub 1beac9c293 Update feature_request.md 2021-01-25 11:33:03 +01:00
Dirk WetterandGitHub 4704a883fe Update other-issues---question.md 2021-01-25 11:32:34 +01:00
Dirk WetterandGitHub 6ed29f628f Update feature_request.md 2021-01-25 11:31:47 +01:00
Dirk WetterandGitHub 226871625e Update feature_request.md 2021-01-25 11:31:31 +01:00
Dirk WetterandGitHub 124f6f54be Update feature_request.md 2021-01-22 12:21:01 +01:00
Dirk WetterandGitHub 977f6966e1 Update bug_report.md 2021-01-22 12:20:05 +01:00
Dirk WetterandGitHub eabc21b7c4 Merge pull request #1830 from drwetter/fix_heartbleed_json.1828 
Fix file output formatting for heartbleed
 2021-01-20 10:12:44 +01:00
Dirk 770e066548 Fix file output formatting for heartbleed 
Quotes were wrong for different results, which lead to some confusion
for finding, cve and cwe
 2021-01-20 08:48:55 +01:00
Dirk WetterandGitHub 7bc16ff7e7 Merge pull request #1826 from drwetter/fix_travis 
Travis CI didn't run. Trying to fix it (3.1dev)
 2021-01-18 14:23:06 +01:00
Dirk c66d58b135 Filter for changing certificates of testssl.sh's server 2021-01-18 09:30:31 +01:00
Dirk 9c9207ae89 Travis CI didn't run. Trying to fix it (3.1dev) 2021-01-13 23:15:42 +01:00
Dirk WetterandGitHub 477bd13899 Merge pull request #1817 from drwetter/le_issuer_fix1816 
Fix issuer check for Let's Encrypt
 2021-01-07 10:25:02 +01:00
Dirk e65233877b Fix issuer check for Let's Encrypt which not halved the exp warn time 
Addresses #1816. Also the name changed
 2021-01-07 09:19:56 +01:00
Dirk WetterandGitHub b8b23b94df Merge pull request #1813 from drwetter/file_exec_fix 
Fixes the search for a non-executable socat binary
 2021-01-05 15:27:40 +01:00
Dirk Wetter 5439985dbe Fixes the search for a non-executable socat binary 
... otherwise there wwould be an ugly screen output.
This commit squashes the error message on the screen.
 2021-01-05 15:25:28 +01:00
Dirk WetterandGitHub a9f4bb5fb5 Merge pull request #1810 from drwetter/starttls_injection 
STARTTLS injection
 2020-12-29 14:40:58 +01:00
Dirk WetterandGitHub e1a43e6e16 Merge branch '3.1dev' into starttls_injection 2020-12-29 13:46:18 +01:00
Dirk Wetter 7c66535628 resolve merge conflict 2020-12-29 13:44:04 +01:00
Dirk WetterandGitHub ffe223f6e6 Merge pull request #1807 from tosticated/custom_http_headers 
Custom HTTP request headers support added. Addresses #1770
 2020-12-26 12:13:59 +01:00
Dirk WetterandGitHub 2682d032b8 Merge pull request #1801 from drwetter/tmpfix_order_idsfriendly+U 
Fix order for -U and --ids-friendly
 2020-12-12 12:03:22 +01:00
Dirk Wetter 39132fe3d0 Fix order for -U and --ids-friendly 
Workaround for bug see #1717. In addition: Bring  the test closer to a cleaner style,
as the others

Should --ids-firednly could be as well be removed when travis runs faster.
 2020-12-11 20:49:15 +01:00
Dirk WetterandGitHub 4f375de26c Merge pull request #1799 from PeterDaveHello/RefactorDockerfileApkUsage 
Refactor `apk` usage in Dockerfile
 2020-12-09 09:17:00 +01:00
Dirk WetterandGitHub 2cb96d4e9e Merge pull request #1798 from drwetter/client_always_wide 
Client simulation per default as wide
 2020-12-08 23:23:55 +01:00
Dirk Wetter d76829cd28 wide mode for client simulation 2020-12-08 19:52:42 +01:00
Dirk Wetter e7fa4ff4ce Client simulation per default as wide 
... in order to be consistent with run_server_preference().

The wide formatting of other tests need some inspection and
off the top off my head are not as perfectly formatted so that
they should not run per default in wide mode.
 2020-12-08 19:43:07 +01:00
Dirk WetterandGitHub f6e2a5c381 Merge pull request #1797 from atroost/hex2curves 
Hex2curves
 2020-12-03 12:44:21 +01:00
Dirk WetterandGitHub ea6d99fe93 Merge pull request #1795 from drwetter/no_code_update 
Trying to save resources for poor Travis/CI ;-)
 2020-11-28 10:08:53 +01:00
Dirk WetterandGitHub a780ad6174 fix '|" 2020-11-27 20:24:46 +01:00
Dirk Wetter 1cd5510955 Trying to save resources for poor Travis/CI ;-) 
See https://github.com/google/EarlGrey/pull/383/files/3b38a5dea36a88aba42a42931e77a7c5429a1837
 2020-11-27 18:10:43 +01:00
Dirk WetterandGitHub 19494a6d8b Merge pull request #1794 from drwetter/drwetter-patch-1 
Minor changes to Readme Dockerfile again
 2020-11-27 17:05:22 +01:00
Dirk WetterandGitHub c88d22a0f0 Update Dockerfile.md 2020-11-27 17:05:03 +01:00
Dirk WetterandGitHub 2655e91255 Update Readme.md 2020-11-27 17:00:34 +01:00
Dirk WetterandGitHub 20c57289d1 Merge pull request #1792 from drwetter/docker_docu_polish 
Consolidate docker sections in Readme.md and Dockerfile.md
 2020-11-27 16:35:03 +01:00
Dirk Wetter 1a7e4f1e92 consolidate docker sections in Readme.md and Dockerfile.md 
see #1791
 2020-11-27 16:33:23 +01:00
Dirk WetterandGitHub 849c031597 Merge pull request #1789 from drwetter/skip_sometunittests 
Trying to reduced the runtime of travis
 2020-11-27 15:24:06 +01:00
Dirk Wetter 96d4b4f08b Trying to reduced the runtime of travis 
Often in the past travis was hitting a limit (50min?).

This is a try to make reasonable cuts to the unit tests:
- For STARTTLS some checks with OPenSSL are skipped
- For JSON and HTML outputs --ids-friendly was added assumming we
  don't change the output of ticketbleed, CCSI, HeartBleed and ROBOT any more.
- There's also not point to run those checks against badssl
- for  the diff check we switch to 'or diag' to display a dfifference
 2020-11-27 13:19:52 +01:00
Dirk WetterandGitHub a5d93486ad Merge pull request #1788 from drwetter/diff_unittest 
Diff unittest
 2020-11-26 20:04:22 +01:00
Dirk 665209bf60 typos 2020-11-26 16:27:40 +01:00
Dirk 1b63760bc3 Add baseline master file for testssl.sh 2020-11-26 16:05:08 +01:00
Dirk WetterandGitHub 9aafc452d8 Merge pull request #1787 from drwetter/unittest_reorder 
Unittest reorder
 2020-11-26 16:04:02 +01:00
Dirk a98ede0720 Finalize first diff check for travis 2020-11-26 15:58:13 +01:00
Dirk 49d321cfbb Add "command not found" 2020-11-26 13:41:44 +01:00