Commit Graph
5574 Commits
Author SHA1 Message Date
dependabot[bot]andGitHub ee0a9bac5f Bump shogo82148/actions-setup-perl from 1.44.0 to 1.44.1
---
updated-dependencies:
- dependency-name: shogo82148/actions-setup-perl
  dependency-version: 1.44.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-10-02 00:31:23 +00:00
Dirk WetterandGitHub 5b900792f2 Merge pull request #3166 from testssl/fix_starttls_io
Fix starttls_io()
2026-09-30 19:20:16 +02:00
Dirk 23b41bd3f3 Fix starttls_io()
As noted in #3154 there was an unused variable `waitsleep` in `starttls_io`
which was filled with argument passed \#3. The loop search for the pattern
in `$2` however was the filled with another variable `nr_waits` which was
pre-set to 10 (`STARTTLS_SLEEP`)

This PR fixes that by
- removing STARTTLS_SLEEP from this function
- passing a value of 4 to this function when called *)

For ~1200 xmpp tests 2 was the maximum in less than 10% of the cases, so
4 should be really safe. `starttls_postgres_dialog()` uses also `starttls_io`
but it should be a safe bet when searching for the pattern `S`
2026-09-30 18:07:15 +02:00
Dirk WetterandGitHub d1fe32efc6 Merge pull request #3163 from testssl/docker_baseimageupdate
Docker baseimageupdate
2026-09-29 17:20:24 +02:00
Dirk dffdb69533 Upgrade as November 2026 3.21 will be EOL 2026-09-29 17:10:38 +02:00
Dirk 863b17a02d replaced 3.2 by 3.3dev
The instructions still could need an update as many commands will fail
using modern docker binaries.
2026-09-29 17:08:06 +02:00
Dirk 7c9c66e4de Upgrade to Leap 16.0 2026-09-29 17:07:36 +02:00
Dirk WetterandGitHub 0bb6581629 Merge pull request #3162 from testssl/instructions
better instructions
2026-09-29 16:52:04 +02:00
Dirk WetterandGitHub 815999d760 better instructions 2026-09-29 16:51:01 +02:00
Dirk WetterandGitHub eeef7a72c0 Merge pull request #3158 from dcooper16/fix_sc2027
Fix Shellcheck SC2027
2026-09-29 16:03:40 +02:00
David Cooper a7a8f2fe5b Fix Shellcheck SC2027
Fix Shellcheck issue SC2027 by removing unnecessary quotes.
2026-09-28 21:15:00 -07:00
Dirk WetterandGitHub 7ff3008c03 Merge pull request #3159 from dcooper16/declare_more_local_vars
Declare more local variables
2026-09-28 14:31:29 +02:00
Dirk WetterandGitHub 43564c57d3 Merge pull request #3161 from dcooper16/ecdhe_mlkem512
Support draft-rosomakho-tls-ecdhe-mlkem512
2026-09-28 14:29:52 +02:00
David 2a0f63cf1c Support draft-rosomakho-tls-ecdhe-mlkem512
This commit adds support for the two code points in draft-rosomakho-tls-ecdhe-mlkem512 (SecP256r1MLKEM512 and MLKEM512X25519).
2026-09-26 19:36:44 -07:00
David Cooper c9d6c69f9f Declare more local variables
Add declarations for two local variables that were missed in #3151.
2026-09-26 12:02:22 -07:00
Dirk WetterandGitHub 31f4e85d8a Merge pull request #3156 from dcooper16/cmdline_warnings
No command line warnings on display only
2026-09-23 09:47:25 +02:00
Dirk WetterandGitHub d0c633ef63 Merge pull request #3160 from dcooper16/improve_emphasize_stuff_in_headers
Improve emphasize_stuff_in_headers()
2026-09-23 09:33:17 +02:00
David CooperandGitHub a573b4b478 Improve emphasize_stuff_in_headers()
Improve emphasize_stuff_in_headers() by matching more than one digit at a time.

The primary benefit of this change is in the HTML, since it does not result in each digit being wrapped by <span style="color:#8a7237;">...</span>
2026-09-22 21:50:39 -07:00
David CooperandGitHub b55ea3c570 No command line warnings on display only
testssl.sh shouldn't issue command line warnings about the target not being a server name (or the use of "--fast" or "--ssl-native") when the command line includes the "--local" option.
2026-09-22 16:03:55 -07:00
Dirk WetterandGitHub 4dfbbbaf92 Merge pull request #3153 from dcooper16/fix_SC2313
Fix Shellcheck SC2313
2026-09-22 10:09:21 +02:00
David Cooper 84b1c803ca Fix Shellcheck SC2313
This commit fixes Shellcheck issue SC2313.
2026-09-21 15:30:48 -07:00
Dirk WetterandGitHub 68d27904f7 Merge pull request #3152 from dcooper16/fix_SC2015
Fix Shellcheck SC2015
2026-09-21 22:10:22 +02:00
Dirk WetterandGitHub 129019f5ba Merge pull request #3151 from dcooper16/fix_undeclared_vars
Declare local variables
2026-09-21 22:01:09 +02:00
David Cooper a6c9437d0a Fix Shellcheck SC2015
This commit fixes Shellcheck issue SC2015 by replacing statements of the form "A && B || C" with "if A; then B; else C; fi".
2026-09-18 21:46:08 -07:00
David e897c24bce Declare local variables
This commit adds missing declarations for local variables, so that they are not mistakenly treated as globals. It also changes one global variable (single_cipher) to uppercase and deletes two lines in run_cipher_match() that were not doing anything.
2026-09-18 20:16:43 -07:00
Dirk WetterandGitHub a080c03ec1 Merge pull request #3149 from dcooper16/fix_shellcheck_issues
Fix some Shellecheck issues
2026-09-18 17:00:48 +02:00
David Cooper 3cf9b6596c Fix some Shellecheck issues
Fix Shellcheck issues SC2171, SC2236, SC2269, SC2320, SC2321, and SC2322.
2026-09-17 17:51:40 -07:00
Dirk WetterandGitHub 080a656f18 Merge pull request #3144 from dcooper16/avoid_color_functions
Avoid use of color functions
2026-09-16 19:19:04 +02:00
David f7cc8108d0 Remove remaining color functions
This commit removes definitions for "yellow," "brown," and "off," which are no longer used now that emphasize_stuff_in_headers() has been rewritten.
2026-09-16 09:02:59 -07:00
David Cooper d99132fb5c Avoid use of color functions
run_freak() and run_logjam() were using the color functions $magenta and $off (from set_color_functions()) in the sting $addtl_warning. This worked okay for the terminal output, but not for the HTML output or fileout().

This commit fixes run_freak() and run_logjam() by using pr_warning() for the terminal and HTML output and plaintext for fileout().

This commit also deletes the unused color functions from set_color_functions() and adds a note discouraging the use of the color functions that are still defined there.
2026-09-16 08:48:38 -07:00
Dirk WetterandGitHub a572046f14 Merge pull request #3145 from dcooper16/redo_emphasize_stuff_in_headers
Rewrite emphasize_stuff_in_headers()
2026-09-16 14:46:38 +02:00
David CooperandGitHub f90245f65f Rewrite emphasize_stuff_in_headers()
Rewrite so that the function does not make use of $yellow, $brown, or $off. This avoids the need to repeat all of the headers for terminal and HTML output, and it also allows for case insensitive matching.
2026-09-14 16:25:40 -07:00
Dirk WetterandGitHub 0fc53e6f12 Merge pull request #3141 from testssl/dependabot/github_actions/shogo82148/actions-setup-perl-1.44.0
Bump shogo82148/actions-setup-perl from 1.43.1 to 1.44.0
2026-09-14 10:12:53 +02:00
Dirk WetterandGitHub 25fcac5ee4 Merge pull request #3138 from dcooper16/fix_SC2021
Fix Shellcheck SC2021
2026-09-14 10:00:28 +02:00
Dirk WetterandGitHub ab2e753f30 Merge pull request #3137 from dcooper16/fix_SC2125
Fix Shellcheck SC2125
2026-09-14 09:51:21 +02:00
Dirk WetterandGitHub 06c1955f63 Merge pull request #3140 from dcooper16/fix_SC2076
Fix Shellcheck SC2076
2026-09-14 09:42:47 +02:00
dependabot[bot]andGitHub b9f754f082 Bump shogo82148/actions-setup-perl from 1.43.1 to 1.44.0
---
updated-dependencies:
- dependency-name: shogo82148/actions-setup-perl
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-14 00:23:10 +00:00
David CooperandGitHub 85e71adaa2 Fix Shellcheck SC2076
This commit fixes Shellcheck issue SC2076 by not quoting the right-hand-side of "=~" expressions. In the case of lines 22812 and 22939, this commit fixes a bug as the right-hand-side needs to be evaluated as a regular expression.
2026-09-13 17:04:55 -07:00
David Cooper 33e7a5989c Fix Shellcheck SC2125
This commit fixes Shellcheck issue SC2125 by enclosing arithmetic expressions in $((...)) in places where Shellcheck issues a warning.
2026-09-13 15:43:47 -07:00
David CooperandGitHub bce32ae78c Fix Shellcheck SC2021
This commit fixes Shellecheck issue SC2021 by not enclosing list of characters in "[...]' for the 'tr' command.
2026-09-13 14:52:31 -07:00
Dirk WetterandGitHub 98bd9d66a4 Merge pull request #3133 from testssl/socket_timeout_parser
Fix error which prohibited passing an equal sign after "--socket-timeout"
2026-09-03 19:07:43 +02:00
Dirk d2df98d03a Fix error which prohibited passing an equal sign after "--socket-timeout" 2026-09-03 18:09:45 +02:00
Dirk WetterandGitHub 9e09f10380 Merge pull request #3131 from testssl/perl_quality
Add Perl static analysis
2026-09-01 20:02:32 +02:00
Dirk 8eb05bd862 '$' should be passed to the shell not '\$'
... thus not double quoting like \\$
2026-09-01 16:58:14 +02:00
Dirk c312fb8230 Audit all modules
but let for now exit the check always with zero
2026-09-01 16:29:16 +02:00
Dirk bd67671fad double quoting needed in passed expression to grep 2026-09-01 16:19:52 +02:00
Dirk 6b1de564d8 Make the flow finally(TM) work 2026-09-01 15:49:31 +02:00
Dirk 4bab452316 Fix syntax error 2026-09-01 15:42:43 +02:00
Dirk 1880a06110 Enable warnings 2026-09-01 15:27:44 +02:00
Dirk 7e1cd8a8c4 Add "use warnings" + correct subroutine prototypes declaration 2026-09-01 15:21:10 +02:00