Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 21:58:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
662 Commits 16 Branches 39 Tags
e68fcc9dad5802e815c9b61fbe41464ec0884194
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk e68fcc9dad - remove duplicates 2016-01-15 15:15:29 +01:00
Dirk Wetter 8b22e1be19 Merge pull request #265 from seccubus/feature/client-sims 
Feature/client sims
 2016-01-15 14:07:13 +01:00
Dirk 5ff214b894 updates, failed e.g. at github.com 2016-01-13 19:34:11 +01:00
Dirk dc4f90ac48 missing linefeed 2015-12-29 17:07:03 +01:00
Dirk b962ccde53 FIX #262 2015-12-29 10:05:20 +01:00
Dirk 3b17c9e321 cosmetic corrections to help 2015-12-27 14:51:18 +01:00
Dirk 08947b3267 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-12-27 13:34:26 +01:00
Dirk 914e364d1e - fix headline for non-socket support 2015-12-27 13:33:53 +01:00
Dirk Wetter eb66955c96 Update Readme.md 2015-12-24 23:13:20 +01:00
Dirk e10da3a78a - minor adjustmentents to program style 2015-12-24 23:00:23 +01:00
Dirk Wetter a0e91964d8 Update CREDITS.md 2015-12-24 12:41:52 +01:00
Dirk 5c19bf5892 - fix for web sites having leading spaces b4 html/xml content starts 2015-12-22 21:08:52 +01:00
Dirk c3269f1927 - Fixes for #260 2015-12-22 20:31:52 +01:00
Dirk Wetter f65fa69c3c Merge pull request #248 from lainegholson/master 
Add HTTP2/ALPN support
 2015-12-22 12:05:53 +01:00
Dirk Wetter 0d53013c47 Merge pull request #260 from seccubus/feature/redirect_test 
Redirect test that doesn't depend om JSON/CSV output
 2015-12-21 21:14:13 +01:00
Dirk bac7cde3bd - re-adjusted preference for rfc/iana mapping file 2015-12-11 13:13:22 +01:00
Dirk 5ff5a189fb better place for mapping file 2015-12-08 17:53:46 +01:00
Dirk 867d698a16 - days left until expiration 2015-12-08 17:51:46 +01:00
Dirk 1f39ab8241 - fix timestamp in log file 2015-12-08 16:37:35 +01:00
Dirk 041b77c5ed - sanity check whether URL/URI is last arg 
- typo fix while logging (fall back CVS tags weren't written
 2015-12-08 13:31:52 +01:00
Dirk 2e0e7b83d5 reverse non-typo 
drill comes later
 2015-11-28 17:33:10 +01:00
Dirk Wetter ad8f82f190 Merge pull request #240 from k0ste/master 
Add drill support (ldns lib), fix mistype
 2015-11-28 17:14:18 +01:00
Dirk Wetter 7113039daa Merge pull request #241 from lainegholson/master 
Show SHA384 certificates as secure
 2015-11-27 21:09:08 +01:00
Dirk f76d07d43e - logging now the cmd line, FIX #238 
- internal improvements of stdout banner
 2015-11-21 13:39:37 +01:00
Dirk Wetter 3d869920d0 Merge pull request #237 from lainegholson/master 
Fix filename typo
 2015-11-15 16:00:37 +01:00
Dirk Wetter 10422f927a Merge pull request #235 from alarmschaben/master 
Lamest pull request ever: fixed typo in parameter descriptions
 2015-11-13 07:54:01 +01:00
Dirk 0bb795abe2 Merge branch 'master' of github.com:drwetter/testssl.sh 2015-11-11 17:50:00 +01:00
Dirk 5749051839 - fix vertical distances after PFS && wide 
- fix misleading "--ip=v4only" in help
 2015-11-11 17:49:36 +01:00
Dirk Wetter 92666b8a16 Update Readme.md 2015-11-11 12:10:56 +01:00
Dirk 756a6ab41d - NEW: logging of stdout! 
- rearragments in global var declaration for better readability
 2015-11-11 11:56:32 +01:00
Dirk 87592aafd9 - line space for some single vuln. adjusted 2015-11-08 22:14:28 +01:00
Dirk Wetter 4ac7713a22 Merge pull request #229 from lainegholson/master 
mDNS Fixes
 2015-11-08 22:02:38 +01:00
Dirk Wetter 2abad4c258 Update Readme.md 2015-11-05 08:37:48 +01:00
Dirk Wetter eeceece212 add '-bugs' so that buggy F5s can be better tested 2015-11-03 23:30:52 +01:00
Dirk Wetter 50c5f0b93d add '-bugs' so that buggy F5s can be better tested 2015-11-03 23:29:53 +01:00
Dirk e390345629 typo 2015-11-03 19:51:45 +01:00
Dirk c272878c73 - warning session tickets -> PFS 2015-11-03 19:51:05 +01:00
Dirk Wetter 3a28349e22 Update Readme.md 2015-11-03 13:15:19 +01:00
Dirk 8ff39c5028 - client based authentication, FIX #215 
- SSL Session ID support test
 2015-11-03 13:13:10 +01:00
Dirk 0463471c40 - fixing side effect from #225 
- other minor output corrections
 2015-11-03 10:30:59 +01:00
Dirk 84e6be3547 - revert part of #225 
- clarify name of bool var for type of tput
 2015-11-02 10:49:40 +01:00
Dirk Wetter 8b54609c3d Merge pull request #225 from Harinus/master 
Fix: tput: No value for $TERM and no -T specified
 2015-11-02 10:40:59 +01:00
Dirk Wetter 2b49f9204d Update CREDITS.md 2015-11-01 19:40:20 +01:00
Dirk Wetter 1097beab12 Merge pull request #227 from lainegholson/master 
Add support for .local domains with avahi
 2015-11-01 19:37:28 +01:00
Dirk Wetter 84ad7d9b69 client auth + Peter 2015-10-26 09:56:33 +01:00
Dirk Wetter 0009107947 Merge pull request #224 from PeterMosmans/cygwin-2 
Added check for availability oftput (Fixes #222)
 2015-10-25 13:37:20 +01:00
Dirk Wetter 5fd6e28f09 Merge pull request #221 from wlovins/master 
Changed wording for easier readability.
 2015-10-16 16:02:07 +02:00
Dirk 7bf1319c93 - FIX #218 for exim and friends 2015-10-15 15:14:37 +02:00
Dirk eb49132682 - changed headline for each sub test from blue to underline+bold 
- save determine_service log
 2015-10-15 14:15:07 +02:00
Dirk 78fab8addb - FIX #213, wording 2015-10-13 22:25:01 +02:00
Dirk d4dbf1138c - FIX #214 2015-10-13 08:31:54 +02:00
Dirk Wetter 2b14455c55 client auth added 2015-10-11 23:41:05 +02:00
Dirk 1a1f007ef9 - banner f'up reversed 2015-10-11 23:34:53 +02:00
Dirk 8c0786d147 - switched on clientauth functionality (missed b4) 2015-10-11 23:23:35 +02:00
Dirk b9bfd48871 - client based auth (see sclient_connect_successful() works now, see #206) 
- careful regression tests for this, point open: speed
- test for more TLS extensions
- heartbleed() does now before a check whether heartbeat is available to save time
- breach simplyfied (and doesn't have to be killed in seldom cases)
- tmpfiles are only being erased after exit not after each function
- user agent is testssl -- unless --sneaky is chosen
- global host vars are now being resetted to prevent side effects
- tls version in record layer is now always 1
- used ERRFILE wherever possible
- smaller code cleanups
 2015-10-11 23:07:16 +02:00
Dirk Wetter 379bc9464a Update Readme.md 2015-10-11 11:47:10 +02:00
Dirk Wetter 4eacc75f2d Merge pull request #209 from jumanjiman/docker_readme 
Readme: add link(s) to external contrib, such as docker images
 2015-10-11 10:03:19 +02:00
Dirk Wetter 0600e39b45 - fix screw up of rDNS display for those few folks having only IPv4 ;-) 2015-10-06 12:30:29 +02:00
Dirk a3a15aa11e Merge branch 'master' of github.com:drwetter/testssl.sh 2015-10-05 09:59:22 +02:00
Dirk f8d6a2fb6d - IPv6 formatting fixed, see #11 (points 3,4,5) 
5 cannot be done automagically, see issue
 2015-10-05 09:56:21 +02:00
Dirk Wetter fc46a61733 Update Readme.md 2015-10-05 09:22:02 +02:00
Dirk Wetter 8b917e6625 Update Readme.md 2015-10-05 09:19:11 +02:00
Dirk a0d634f94a - ouput corrections for BEAST 2015-10-04 12:32:29 +02:00
Dirk 41bc2fb70c - regression wrt what_dh 2015-10-03 00:14:52 +02:00
Dirk Wetter 5d230edb3a Merge branch 'master' of github.com:drwetter/testssl.sh 2015-10-01 13:29:25 +02:00
Dirk Wetter f3cef41053 - some speed improvements (sed, tr --> bash internal s'n'r) 
- revamped BEAST a bit: availablity of higher protocols lead now to yellow color, see #208
- Fixed error in BEAST (no higher protos led to no message)
- made BEAST it faster: one check for protocol ssl3+tls1 upfront, see #208
 2015-10-01 13:27:14 +02:00
Dirk Wetter 8648398094 Update CREDITS.md 2015-10-01 13:19:15 +02:00
Dirk Wetter fd256a74b1 Merge pull request #207 from typingArtist/beast 
Fix CBC cipher selection for BEAST detection
 2015-10-01 11:51:16 +02:00
Dirk 1c1eaa53d8 - fix for renamed http_header function 2015-09-29 18:47:49 +02:00
Dirk cac49cb1f1 - "--file" implicitly does "--warnings=batch" 
- "--file" works now fine with equal sign
- fixed load balancer issue where header request stalled and testssl.sh consequently too
- http_date needed to be changed too because of that
- needed to estimate then the http_date when request was killed (HAD_SLEPT)
  will Mr. Spock like this??
- fixed load balancer issue where header request for breach test stalled and thus an error was displayed
- code improvements
 2015-09-28 22:54:00 +02:00
Dirk Wetter 251e09bb4e IPv6 2015-09-26 23:00:41 +02:00
Dirk feaef680aa - IPv6 #11 is 80% working (whohoo!). Needed is an openssl capable IPv6 and HAS_IPv6=true in the environment 
- FIX #191
 2015-09-26 22:44:33 +02:00
Dirk Wetter cc81642ee3 - #FIX 202 (EV detection from TERENA/Digicert) 2015-09-25 14:35:42 +02:00
Dirk a2efc201b7 - added a failure condition for trust check 2015-09-24 09:10:43 +02:00
Dirk 06466cca92 - proxy in determine_trust was missing 2015-09-23 09:03:47 +02:00
Dirk Wetter bdd6856de8 Update Readme.md 2015-09-22 20:17:06 +02:00
Dirk bf54d9ef3d Merge branch 'master' of github.com:drwetter/testssl.sh 2015-09-22 20:09:41 +02:00
Dirk 0b1e573fc9 - FIX #190: Server temp key backport for RH-ish systems works now automagically 
- just to be sure there's a cmd line flag --has-dhbit / env HAS_DH_BITS
- some reordering
 2015-09-22 20:09:26 +02:00
Dirk Wetter 95b6d59b7c Update Readme.md 2015-09-22 17:54:25 +02:00
Dirk faa6de312d Merge branch 'master' of github.com:drwetter/testssl.sh 2015-09-22 17:15:08 +02:00
Dirk 4b57a22f6e - FIX #198 (date env problem under BSD and maybe others) 2015-09-22 17:14:36 +02:00
Dirk Wetter fb565ac78e See #97 2015-09-22 16:39:09 +02:00
Dirk 1668daa04e - NEW: chain of trust -- for openssl 1.0.2 only 
- FIX #97
 2015-09-22 15:05:59 +02:00
Dirk 3eeb1f9d9d - check whether dig, host or nslookup is there. The error message is now describing the cause 2015-09-21 16:43:47 +02:00
Dirk 23802e219d - #FIX 197 
- renamed a variable
 2015-09-21 14:03:48 +02:00
Dirk 6406e1828d - minor polish of output 2015-09-19 15:03:40 +02:00
Dirk 413b64c44a - fixed proxy name resolution and make it more robust 
- additional line if a proxy is used above rDNS
 2015-09-18 15:12:01 +02:00
Dirk Wetter fc3f711b4c Need to reflect the new master 2015-09-17 15:33:41 +02:00
Dirk 945d26d222 - changed version number 
- retabed to five spaces
 2015-09-17 15:30:15 +02:00
Dirk Wetter 4cee5c21c0 Running 2.6. now 2015-09-16 14:58:28 +02:00
Dirk 58096d6633 2.6 release 2015-09-15 08:49:00 +02:00
Dirk 467988fb0a - improved resilience in cipher order check 
- improved also there compatibility with intolerant IIS6 servers
 2015-09-14 12:54:54 +02:00
Dirk Wetter 09c06e0ffa Update Readme.md 2015-09-14 11:21:24 +02:00
Dirk a2ba43ec78 - litemagenta should be used for not fatal conditions / magenta for fatal conditions (prg terminates then) 2015-09-14 11:12:37 +02:00
Dirk 9b08cb7584 - FIX /workaround for #188 (https://github.com/drwetter/testssl.sh/issues/188) 
- bumped up version to rc4
 2015-09-14 11:03:10 +02:00
Dirk a9f231b3ff - fix where an $PID"ERRFILE" was written 2015-09-09 16:41:32 +02:00
Dirk d28317f2d0 - exit code always 0 unless an error occured 
- enable devel feaure of SSLv2 via socket
 2015-09-08 19:30:03 +02:00
Dirk 566a059250 - fix for issue when a non-HTTP service indicates a misleading non-match of certificate 
- wildcard check
 2015-09-06 18:21:08 +02:00
Dirk Wetter b9bfa2355a fix for scott helme's multiple keys (https://scotthelme.co.uk/hpkp-toolset) 2015-09-04 14:19:06 +02:00
Dirk Wetter 422b4d511a minor cleanups for finding openssl binaries 2015-09-04 10:04:56 +02:00