Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 05:38:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,191 Commits 17 Branches 39 Tags
f36e2afa5e36d253ab6e7ac057e8ffdb2aed215f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk f36e2afa5e Review text, renew some paragraphs 2022-09-01 17:21:00 +02:00
Dirk WetterandGitHub 33f28f881b Merge pull request #2215 from drwetter/alpine3.16-dockerfile 
Upgrade Alpine version to the latest stable
 2022-08-22 16:37:43 +02:00
Dirk WetterandGitHub abb8f82d85 Upgrade Alpine version to the latest stable 
3.16.
 2022-08-22 16:31:59 +02:00
Dirk WetterandGitHub 3ac6bd9335 Merge pull request #2210 from dcooper16/fix_cipher_grading 
Fix cipher grading
 2022-08-22 12:09:20 +02:00
Dirk WetterandGitHub 85a30a6ded Merge pull request #2214 from drwetter/minor_typo 
Fix typo...
 2022-08-22 11:56:59 +02:00
Dirk WetterandGitHub 349486fb39 Merge pull request #2211 from dcooper16/fix2198 
Fix #2198
 2022-08-22 11:55:33 +02:00
Dirk Wetter ad644e1cec Fix typo... 
Thanks to codespell
 2022-08-22 08:49:04 +02:00
Dirk WetterandGitHub 79a4de0513 Merge pull request #2212 from drwetter/dependabot/github_actions/docker/build-push-action-3.1.1 
Bump docker/build-push-action from 3.1.0 to 3.1.1
 2022-08-21 13:23:53 +02:00
Dirk WetterandGitHub 730c758488 Merge pull request #2206 from drwetter/update_bug_report 
Update bug_report.md
 2022-08-02 13:28:56 +02:00
Dirk WetterandGitHub 8e6aa10e22 Merge pull request #2209 from drwetter/drwetter-patch-1 
Update feature_request.md
 2022-08-02 13:28:31 +02:00
Dirk WetterandGitHub 78423d3e7d Update feature_request.md 2022-08-02 13:18:49 +02:00
Dirk WetterandGitHub 901f5712f1 Merge pull request #2207 from drwetter/fix_2203_rating 
Address grading bug when --show-each is used
 2022-08-02 13:08:45 +02:00
Dirk Wetter 4f38646523 Address grading bug when --show-each is used 
This fixes #2203. When used -E with -9 and --show-each the grading wasn't
correct as all ciphers printed were included in the grading verdict instead
of just the ones available.
 2022-08-02 10:44:41 +02:00
Dirk WetterandGitHub ffd9129f8d Update bug_report.md 
fix missing char
 2022-08-01 14:15:42 +02:00
Dirk WetterandGitHub d929c1d833 Update bug_report.md 2022-08-01 14:14:11 +02:00
Dirk WetterandGitHub 4e0309cb99 Merge pull request #2205 from drwetter/dependabot/github_actions/docker/build-push-action-3.1.0 
Bump docker/build-push-action from 3.0.0 to 3.1.0
 2022-08-01 14:00:02 +02:00
Dirk WetterandGitHub 88e80d2688 Merge pull request #2201 from drwetter/readme-patch 
Update README.md
 2022-07-02 22:13:06 +02:00
Dirk WetterandGitHub 12654b904b Update README.md 2022-07-02 22:12:56 +02:00
Dirk WetterandGitHub 559049fa60 Merge pull request #2200 from drwetter/cert_update 
Update cert stores
 2022-07-02 22:11:24 +02:00
Dirk e217af0324 Remove the expired DST Root CA X3 cert from ... 
Apple / Linux / Microsoft stores
 2022-07-02 16:02:30 +02:00
Dirk d79504ea8a Reference to remove DST Root CA 2022-07-02 16:00:16 +02:00
Dirk 9f4a3b359c add new stores 2022-07-02 15:59:00 +02:00
Dirk fb2b4935ac Java.pem from Oracle jdk-17.0.3.1 2022-07-01 22:01:36 +02:00
Dirk dca2672d88 Apple.pem: picked from Internet (see etc/Readme.md) 2022-07-01 21:55:43 +02:00
Dirk 285eb60d45 add loop for Apple.pem 2022-07-01 21:51:25 +02:00
Dirk f1003d62f8 fine tune instructions for Apple.pem 2022-07-01 21:45:02 +02:00
Dirk 8b580d1448 Update cert store: Linux + Mozilla 2022-07-01 21:32:38 +02:00
Dirk WetterandGitHub 153ce87982 Merge pull request #2194 from dcooper16/reorganize_ciphers_by_strength 
Reorganize ciphers_by_strength()
 2022-07-01 21:26:26 +02:00
Dirk WetterandGitHub 13298ffd19 Merge pull request #2193 from drwetter/moregitignore 
More .gitignore files
 2022-06-01 09:47:12 +02:00
Dirk Wetter 6959d3c9a5 few amendments to ignore files 2022-05-31 20:39:47 +02:00
Dirk WetterandGitHub 8438f99856 Merge pull request #2169 from drwetter/update_clients1 
Update client simulations
 2022-05-31 17:00:37 +02:00
Dirk Wetter c92a648391 Add LibreSSL from MacOS 2022-05-31 16:17:47 +02:00
Dirk Wetter 854028166d Including AppleMail 2022-05-31 15:12:16 +02:00
Dirk Wetter b274e3b858 correct openssl 3.0.3 data which made CI action fail 2022-05-31 14:32:47 +02:00
Dirk Wetter 6536eaddb6 remove Java 12 and OSX 10 in baseline file 2022-05-31 14:09:19 +02:00
Dirk Wetter a21a343c1c disable Java 12 and Safari on OS X 10.12 2022-05-31 12:17:38 +02:00
Dirk Wetter 09432f0346 minor fix: italic markdown 2022-05-31 12:10:36 +02:00
Dirk Wetter f90b473b32 Add Thunderbid 91.9 to hanshak simulation 2022-05-31 12:10:11 +02:00
Dirk Wetter 6023acd58c Merge branch '3.1dev' into update_clients1 2022-05-31 12:09:23 +02:00
Dirk WetterandGitHub acc063e078 Merge pull request #2181 from dcooper16/continue_server_pref_on_error 
Continue run_server_preference() on error
 2022-05-31 11:37:08 +02:00
Dirk WetterandGitHub e6f6bcaaa7 Merge pull request #2191 from drwetter/pr2189 
Fix CRIME test
 2022-05-30 14:58:48 +02:00
Dirk Wetter dfbb9f8122 Fix Actions 
this one works locally...
 2022-05-30 13:37:07 +02:00
Dirk Wetter 8d817e1dcf PR to merge #2189 
added: changes in CI so that it goes through
 2022-05-25 18:46:08 +02:00
Dirk Wetter f3fe2ac401 Merge branch 'EliteTK-fix-crime-tls1.3' into pr2189 2022-05-25 18:45:13 +02:00
Dirk WetterandGitHub d931eb470c Merge pull request #2186 from drwetter/censys_fix_2127 
Fix censys link in DROWN section
 2022-05-14 13:57:46 +02:00
Dirk 04463784a8 Fix censys link in DROWN section 
See #2127. the line seems very long though.

Note: this was previously commited as #2184 but as there were two mistakes
and one other thing which could be improved I decided to make a hard reset.

Apologize if it caused inconvenience.
 2022-05-14 12:06:09 +02:00
Dirk 1eb8347174 Update comparion/diff file for CI 
... for the time being
 2022-05-10 13:08:44 +02:00
Dirk WetterandGitHub b89574e5c7 Merge pull request #2180 from dcooper16/ossl_ffdhe 
Check for OpenSSL support for ffdhe groups
 2022-05-10 07:47:56 +02:00
Dirk Wetter 86158f0bdf Firefox 100, Chrom and Edge 101 (Win10) 
- disabled Opera (too old)
- disabled ATS 9 / iOS 9
- reenabled Android 8.1
 2022-05-09 17:49:16 +02:00
Dirk Wetter 6bd80b3baa Merge branch '3.1dev' into update_clients1 2022-05-06 10:32:01 +02:00
Dirk Wetter 22d8cd3adf Go client (1.17) 2022-05-06 10:06:03 +02:00
Dirk WetterandGitHub ff23a2ba22 Merge pull request #2177 from drwetter/dependabot/github_actions/docker/setup-buildx-action-2 
Bump docker/setup-buildx-action from 1 to 2
 2022-05-06 08:17:49 +02:00
Dirk WetterandGitHub 4935679f50 Merge pull request #2176 from drwetter/dependabot/github_actions/docker/metadata-action-4 
Bump docker/metadata-action from 3 to 4
 2022-05-06 08:17:33 +02:00
Dirk WetterandGitHub f1ce1a21bb Merge pull request #2175 from drwetter/dependabot/github_actions/docker/setup-qemu-action-2.0.0 
Bump docker/setup-qemu-action from 1.2.0 to 2.0.0
 2022-05-06 08:17:09 +02:00
Dirk WetterandGitHub acfbaf8408 Merge pull request #2174 from drwetter/dependabot/github_actions/docker/login-action-2.0.0 
Bump docker/login-action from 1.14.1 to 2.0.0
 2022-05-06 08:16:42 +02:00
Dirk WetterandGitHub c332d03323 Merge pull request #2173 from drwetter/dependabot/github_actions/docker/build-push-action-3.0.0 
Bump docker/build-push-action from 2.10.0 to 3.0.0
 2022-05-06 08:15:59 +02:00
Dirk Wetter cf79a19598 Add Android 11+12 2022-05-04 19:12:03 +02:00
Dirk Wetter 28e9ddeebd Teating of FFDHE groups 
* readded to the markdown
* readded to the clientsimulations for Java 12
 2022-05-04 18:29:29 +02:00
Dirk Wetter ac6f99fe1c correct FFDHE groups 
... so that they a recognized by ~/utils/hexstream2curves.sh
 2022-05-04 17:44:33 +02:00
Dirk Wetter c6491a3834 Correct spell checking error 
and hint to missing ALPN
 2022-05-04 15:56:25 +02:00
Dirk Wetter 415043865a Add Java 17 LTS 
plus

* amend documentation
* remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
 2022-05-04 15:46:36 +02:00
Dirk Wetter 52ed4181f9 Add SSLSocketClient in Java 
Note this doesn't add alpn (same as openssl). See here https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLSocket.html
if you want to add that.

This code is NOT GPLv2! It was taken from the Oracle web site which didn't list any license
(https://docs.oracle.com/javase/10/security/sample-code-illustrating-secure-socket-connection-client-and-server.htm).
 2022-05-04 15:39:32 +02:00
Dirk Wetter d84492a75e Update openssl 3.0.3 2022-05-04 14:32:04 +02:00
Dirk Wetter cc7a88386d Update documention how to add a client simulation 2022-05-04 12:38:12 +02:00
Dirk WetterandGitHub 859da96ad0 Merge pull request #2167 from drwetter/fix_banner 
Minor changes to banner
 2022-05-04 10:48:18 +02:00
Dirk Wetter 03803cf0c9 Add Safari for macOS 2022-05-03 22:11:31 +02:00
Dirk Wetter 34cc20b0df Minor changes to banner 
On macOS indark mode the git tag in grey wasn't visible. It was
changed now to light grey but it has to be tested how it looks
on a white terminal background.

Also CVS variables were removed which had no meaning.
 2022-05-03 21:02:56 +02:00
Dirk WetterandGitHub 0329eba688 Merge pull request #2164 from drwetter/ftp_starttls_auth_only 
Relax STARTTLS FTP requirement
 2022-04-27 14:49:02 +02:00
Dirk 6c69fdbf4b Relax STARTTLS FTP requirement 
In rare? occassions where the STARTTLS FEAT request only displays AUTH instead
of AUTH TLS, testssl.sh fails as it cannot upgrade to TLS.

Required by RFC 4217 is only AUTH ("MUST"), AUTH TLS is optional ("should"), see section 6.
This commit relaxes the presence of TLS after AUTH and it fixes #2132.
 2022-04-27 13:34:03 +02:00
Dirk WetterandGitHub ab33f6c0b6 Merge pull request #2163 from drwetter/fix-permissions-githubdockeraction 
Hotfix reenabling write permissions
 2022-04-25 10:18:49 +02:00
Dirk e5efdd6cb4 Hotfix reenabling write permissions 
see #2158
 2022-04-25 10:17:05 +02:00
Dirk WetterandGitHub db80ef14f0 Merge pull request #2156 from dcooper16/fix_run_server_defaults 
Fix run_server_defaults()
 2022-04-25 08:54:52 +02:00
Dirk WetterandGitHub 5053105d3f Merge pull request #2154 from dcooper16/server_pref_no_default_cipher 
Fix run_server_preference() with no default protocol
 2022-04-24 19:30:18 +02:00
Dirk WetterandGitHub cc8c02d653 Merge pull request #2139 from dcooper16/fix2131 
Fix #2131
 2022-04-24 18:17:17 +02:00
Dirk WetterandGitHub 4d7357a64e Merge pull request #2158 from turrisxyz/setup-permissions 
Set permissions for GitHub actions
 2022-04-24 18:03:10 +02:00
Dirk WetterandGitHub 61eb164875 Merge pull request #2157 from dcooper16/update_protos_offered 
Update PROTOS_OFFERED
 2022-04-22 15:45:49 +02:00
Dirk WetterandGitHub ca71b2e374 Merge pull request #2162 from dcooper16/ossl_ciphers 
Fix calls to $OPENSSL ciphers
 2022-04-22 15:38:30 +02:00
Dirk WetterandGitHub 3a460b40e1 Merge pull request #2160 from dcooper16/try_more_ciphers 
Try more ciphers
 2022-04-22 15:26:07 +02:00
Dirk WetterandGitHub 54e5469411 Merge pull request #2150 from dcooper16/no_session_id 
Fix setting NO_SESSION_ID
 2022-04-14 13:19:24 +02:00
Dirk WetterandGitHub 225f1286b4 Merge pull request #2149 from dcooper16/fix2147 
Fix #2147
 2022-04-14 13:12:16 +02:00
Dirk WetterandGitHub 6054be6dff Merge pull request #2145 from dcooper16/ossl3_fix 
More OpenSSL compatibility fixes
 2022-04-12 18:50:26 +02:00
Dirk WetterandGitHub e82178719d Merge pull request #2141 from dcooper16/ossl3_compat 
OpenSSL compatibility fix
 2022-04-07 21:29:20 +02:00
Dirk WetterandGitHub fc07b379d0 Merge pull request #2142 from dcooper16/fix_flat_json 
Fix flat JSON file
 2022-04-07 21:28:32 +02:00
Dirk WetterandGitHub 46b66c777a Merge pull request #2140 from dcooper16/fix2138 
Fix #2138
 2022-04-07 17:33:59 +02:00
Dirk b6c18f5e4e Remove trailing spaces to get rid of failing status of CI 2022-04-01 18:05:27 +02:00
Dirk WetterandGitHub ed38cbeed3 Merge pull request #2137 from drwetter/2074_md_fixes 
Fix makefile
 2022-04-01 15:10:44 +02:00
Dirk fe010c87d2 Fix makefile 
* add title
* feature to just rebuild html and roff with force target
 2022-04-01 15:08:55 +02:00
Dirk WetterandGitHub 429655de55 Merge pull request #2133 from drwetter/2074_md_fixes 
Implement fixes in documentation from #2074
 2022-04-01 14:48:24 +02:00
Dirk 83d4075465 fixes for roff and html 2022-04-01 14:45:48 +02:00
Dirk db932c2bdc prevent CI from running in doc dir s/docs/doc/ 2022-04-01 14:14:59 +02:00
Dirk 28085e5ec9 Implement fixes in documentation from #2074 
kudos @k0lter

* numbering
* some ticks / backticks

For now I left the html and roff files like they were. That should be reconsidered
later.
 2022-04-01 13:12:02 +02:00
Dirk ab81558ba4 Merge branch 'k0lter-doc-fixes' into 3.1dev 2022-04-01 12:52:28 +02:00
Dirk Wetter 1059b07909 Fix "ID resumption test failed" under Darwin 
Under Darwin using LibreSSL it was not possible to test for session
resumption by session ID.

This fixes #2096 by checking not only the return value of the s_client
hello but also whether a probable certificate is being returned.
 2022-04-01 12:50:12 +02:00
Dirk Wetter deef51305a Fix JSON output bc of missing locale in alpine (3.1dev) 
It is now being tested whether the binary locale exists and
there's a global introduced for that.

Also there's no fileout warning at this early stage anymore
as it leads to non-valid JSON.

This fixes #2103 in 3.1dev.
 2022-04-01 12:50:12 +02:00
Dirk Wetter dd5d91f527 Fix locale error message when en_US.UTF-8 isn't available 
Therefore a new global function was declared checking whether any of
the known locales work on the client without seeting them.
C / POSIX should work as well for LC_COLLATE.

This fixes #2100 for 3.1dev.
 2022-04-01 12:50:12 +02:00
Dirk Wetter 86853c4a5c correct English in comment 2022-04-01 12:50:12 +02:00
Dirk Wetter 8b4ebc385a Fix Darwin / LibreSSL startup problem 
This PR addresses a bug where a user encountered the question "The results
might look ok but they could be nonsense. Really proceed".

That happened under Darwin and probably some LibreSSL versions when
checking some hosts. sclient_auth() returned 1 indicating no SSL/TLS
handshake could be established.

This PR modifies sclient_auth() so that in those cases 0 is returned by
skipping the check for the session ID. As NO_SSL_SESSIONID needs to
be set when there's no session ID, this is done separately.
 2022-04-01 12:50:12 +02:00
Dirk Wetter c5ed4c9e5e Add CI check 
* for STARTTLS + LDAP
* for STARTTLS + POP3 reenable check with openssl as GH has not the time limits which Travis had
 2022-04-01 12:50:12 +02:00
Dirk Wetter 05d94fa019 Update documentation 
* remove hint that LDAP only works with STARTTLS
* Add the relevant LDAP RFC for STARTTLS
* Amend with sieve RFC
* Correct numbering order of RFC section
 2022-04-01 12:49:53 +02:00
Dirk Wetter a778356cc3 Remove ldap protocol early returns 
Partly revert bb5450e3f5
 2022-04-01 12:45:59 +02:00