Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2026-09-14 13:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,438 Commits 16 Branches 39 Tags
f39564d84339750f21238982a1d718fcd2ad6d7e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dirk f39564d843 Make sure util_Linux gets replaced as intended 
There were some discussions in #2420 whether the zypper install
commend worked as intended. While there's liitle doubt that those
packages weren't installed this PR makes really sure that this is the case.

Also it does an update via ``zypper up`` as the image provided from
dockerhub seemed to be somewhat behind.
 2023-10-13 17:07:38 +02:00
Dirk WetterandGitHub 6431104d3e Merge pull request #2423 from drwetter/update_container_leap15.5 
Upgrade to leap 15.5
 2023-10-13 10:41:58 +02:00
Dirk dda89c629e Upgrade to leap 15.5 2023-10-13 10:36:05 +02:00
Dirk b21c5ee780 Add IP protocol to debug msg 2023-10-11 15:22:46 +02:00
Dirk WetterandGitHub f50a958fa9 Merge pull request #2417 from vsbs-david/local_hostname_drill 
Added drill command to get_a[aaa]_record() for local hostname
 2023-10-11 15:19:44 +02:00
Dirk WetterandGitHub 30e0c8418a Merge pull request #2298 from drwetter/changelog_3.2 
Start listing changes and contributions for 3.2
 2023-10-10 11:53:26 +02:00
Dirk Wetter 2b2e36352c Merge branch '3.2' into changelog_3.2 2023-10-10 11:32:12 +02:00
Dirk Wetter b0d035cbf4 went though the log from today back to Nov 22 2023-10-10 11:13:44 +02:00
Dirk WetterandGitHub 4e574d6540 Merge pull request #2416 from drwetter/prepare4release 
Bump version number
 2023-10-10 10:29:03 +02:00
Dirk Wetter bdeda3ab1c Bump version number 2023-10-09 22:51:44 +02:00
Dirk WetterandGitHub 4c6e8d79ed Merge pull request #2414 from drwetter/update_certstore 
Update of certificate stores
 2023-10-09 22:20:42 +02:00
Dirk db175a8d51 Update of certificate stores 
Mozilla: 2023-08-22
Debian 10
JDK 22
Windows 10 22H2, Patched until 2023-10
Apple: 2023-10
 2023-10-09 22:08:48 +02:00
Dirk WetterandGitHub 8f295cb090 Merge pull request #2411 from ghen2/servicedetection 
Improve detection for POP3, IMAP and SMTP services.
 2023-10-07 15:09:11 +02:00
Dirk WetterandGitHub 2d8fbe2302 Merge pull request #2409 from drwetter/deprecate_sslnative 
Deprecate --ssl-native
 2023-10-07 10:44:52 +02:00
Dirk Wetter f0e1540bc6 add comment wrt #2403 2023-10-03 18:09:58 +02:00
Dirk Wetter 65da627820 better English 2023-10-03 15:56:18 +02:00
Dirk Wetter d46301e9f7 Deprecate --ssl-native 2023-10-03 15:51:58 +02:00
Dirk WetterandGitHub 96d82e2dff Merge pull request #2407 from drwetter/fix_2403_Dockerfile_tar 
add busybox link to tar
 2023-10-03 15:17:05 +02:00
Dirk Wetter 39217ebe87 fix file instead of word 2023-10-03 15:14:19 +02:00
Dirk Wetter dc8721ca20 fix spellcheck issues 2023-10-03 15:14:19 +02:00
Dirk WetterandGitHub 4c90cf6d8b Merge pull request #2408 from drwetter/fix_spelleckissues 
fix spellcheck issues
 2023-10-03 15:12:44 +02:00
Dirk Wetter 63cc603c92 fix file instead of word 2023-10-03 15:10:00 +02:00
Dirk Wetter 2acffa5a3f fix spellcheck issues 2023-10-03 15:06:46 +02:00
Dirk Wetter 8a1e90767b add busybox link to tar 
See #2403
 2023-10-03 15:00:04 +02:00
Dirk WetterandGitHub 7a60251ff9 Merge pull request #2400 from dekkers/doc-server-preferences 
Add --server-preference alias to documentation
 2023-09-21 20:57:20 +02:00
Dirk WetterandGitHub 8e51a5c3d7 Merge pull request #2398 from drwetter/dependabot/github_actions/docker/setup-buildx-action-3 
Bump docker/setup-buildx-action from 2 to 3
 2023-09-13 10:31:30 +02:00
Dirk WetterandGitHub 44428af875 Merge pull request #2397 from drwetter/dependabot/github_actions/docker/login-action-3.0.0 
Bump docker/login-action from 2.2.0 to 3.0.0
 2023-09-13 10:31:02 +02:00
Dirk WetterandGitHub 2e549c1b7d Merge pull request #2396 from drwetter/dependabot/github_actions/docker/metadata-action-5 
Bump docker/metadata-action from 4 to 5
 2023-09-13 10:30:42 +02:00
Dirk WetterandGitHub 1d626afabe Merge pull request #2395 from drwetter/dependabot/github_actions/docker/build-push-action-5.0.0 
Bump docker/build-push-action from 4.2.1 to 5.0.0
 2023-09-13 10:30:19 +02:00
Dirk WetterandGitHub 13256e1e65 Merge pull request #2394 from drwetter/dependabot/github_actions/docker/setup-qemu-action-3.0.0 
Bump docker/setup-qemu-action from 2.2.0 to 3.0.0
 2023-09-13 10:29:58 +02:00
Dirk WetterandGitHub b7230d4b5d Merge pull request #2392 from drwetter/dependabot/github_actions/docker/build-push-action-4.2.1 
Bump docker/build-push-action from 4.1.1 to 4.2.1
 2023-09-11 10:21:22 +02:00
Dirk WetterandGitHub 0791efbbda Merge pull request #2390 from dcooper16/no_tls1 
Support OpenSSL with no TLSv1
 2023-09-08 11:24:00 +02:00
Dirk WetterandGitHub eaf6e40463 Merge pull request #2388 from drwetter/dependabot/github_actions/actions/checkout-4 
Bump actions/checkout from 3 to 4
 2023-09-05 13:55:33 +02:00
Dirk WetterandGitHub 765b5855cc Merge pull request #2386 from drwetter/strict_parsing_HSTS 
Strict parser for HSTS
 2023-08-28 19:55:57 +02:00
Dirk 01ab3acde5 Strict parser for HSTS 
As suggested in #2381 this parses strictly the value for mag-age
in the HSTS header line. While it is implemented only in run_hsts()
it could be extracted to a separate functioni in the future and used
elsewhere too.

The improvement is more strict and catches e.g. '==' signs and issues
a warning. See https://www.rfc-editor.org/rfc/rfc6797#section-6.1.1 .

Also it is picky regarding quotes now which are only allowed enclosing
the value.
 2023-08-28 18:33:41 +02:00
Dirk WetterandGitHub c55207d45c Merge pull request #2385 from drwetter/hide_fast 
Hide --fast option in help() and issue a warning when it's used
 2023-08-28 18:26:36 +02:00
Dirk WetterandGitHub fc0aeaafcd Merge pull request #2384 from drwetter/OPENSSL2_HAS_TLS_1_3 
Introducing variable OPENSSL2_HAS_TLS_1_3
 2023-08-28 18:26:20 +02:00
Dirk 0fcddff1cd Warn when using --fast 
... in the terminal only for now.
 2023-08-28 16:08:04 +02:00
Dirk d19675136a Deprecating $FAST / --fast 
As this option shows inconsistencies / wrong results and a fix would require
too much work at this moment this option is being hidden from the help. It
wasn't in the ~/doc .

See #849 , #2382, #1732 etc.
 2023-08-28 15:53:02 +02:00
Dirk 79577a84eb Introducing variable OPENSSL2_HAS_TLS_1_3 
If we run with supplied binary AND /usr/bin/openssl supports TLS 1.3
we now have a variable OPENSSL2_HAS_TLS_1_3 which is set to true.

It can be used for subsequent changes where we need TLS 1.3 for or
where it would be better to use TLS 1.3.
 2023-08-28 15:42:17 +02:00
Dirk WetterandGitHub 1e7219f344 Merge pull request #2383 from ghen2/grep-3.8 
Fix another grep-3.8 warning on needlessly escaped exclamation mark.
 2023-08-28 14:38:18 +02:00
Dirk WetterandGitHub 27c77071eb Merge pull request #2380 from WtfJoke/removeOutdatedDockerImageRefere 
Remove reference to outdated docker image
 2023-08-12 13:12:35 +02:00
Dirk WetterandGitHub c888475b2c Merge pull request #2377 from drwetter/3.1dev_to_3.2_references 
change references from 3.1dev to 3.2
 2023-07-31 17:15:15 +02:00
Dirk 2067ac8123 Fall back to heise.de 
.. to scan.

It worked in a few examples locally. Other hosts I tried so far weren't
available anymore (like scanme.nmap.org). In order to reduce the burden
we scan now only during PRs.
 2023-07-31 16:34:56 +02:00
Dirk 15b7f7b403 Stop using deprecated OS 2023-07-31 14:03:57 +02:00
Dirk fc14a02035 Changed heise.de to example.com as sometimes we're blocked 2023-07-31 13:44:35 +02:00
Dirk 9e76b1e9ce Change content here too 2023-07-31 12:51:29 +02:00
Dirk 6669af2fc5 remove this one (3.2 see previous commit) 2023-07-31 12:46:50 +02:00
Dirk 5246194bee further files which contained 3.1dev 2023-07-31 12:46:04 +02:00
Dirk b6143e1fb9 Change references from 3.1dev to 3.2 2023-07-31 12:40:56 +02:00
Dirk WetterandGitHub 3c0ae4663f Merge pull request #2375 from dcooper16/line_endings 
Fix line endings in etc/curves-mapping.txt
 2023-07-03 19:56:22 +02:00
Dirk WetterandGitHub 3a80a13d66 Merge pull request #2372 from drwetter/dependabot/github_actions/docker/build-push-action-4.1.1 
Bump docker/build-push-action from 4.1.0 to 4.1.1
 2023-06-15 13:27:40 +02:00
Dirk WetterandGitHub 864877df0e Merge pull request #2370 from drwetter/dependabot/github_actions/docker/setup-qemu-action-2.2.0 
Bump docker/setup-qemu-action from 2.1.0 to 2.2.0
 2023-06-12 10:20:44 +02:00
Dirk WetterandGitHub 69549d815f Merge pull request #2369 from drwetter/dependabot/github_actions/docker/login-action-2.2.0 
Bump docker/login-action from 2.1.0 to 2.2.0
 2023-06-12 10:20:21 +02:00
Dirk WetterandGitHub 35590baa5a Merge pull request #2371 from drwetter/dependabot/github_actions/docker/build-push-action-4.1.0 
Bump docker/build-push-action from 4.0.0 to 4.1.0
 2023-06-12 10:19:54 +02:00
Dirk WetterandGitHub 7f49af1100 Merge pull request #2367 from drwetter/Improve_ServerHello_ErrorMessage 
Make clear where the parsing error comes from: SSL or TLS
 2023-06-05 12:45:28 +02:00
Dirk 858f00304c tiny clarification in debug mode 2023-06-02 16:57:47 +02:00
Dirk 6e2b9ae1c6 Make clear where the parsing error comes from: SSL or TLS 2023-06-02 16:43:27 +02:00
Dirk WetterandGitHub 00b510d08c Merge pull request #2364 from drwetter/lineending_lf 
try to fix the line ending problem using .gitattributes .
 2023-05-23 18:39:29 +02:00
Dirk WetterandGitHub 947b2565e6 Merge pull request #2363 from teki69/patch-1 
Fix CRL conversion issue when already in PEM format
 2023-05-23 18:38:46 +02:00
Dirk 33211c0cf1 add file types to be interpreted w lf line endings 2023-05-23 16:18:42 +02:00
Dirk e6abc5fedc Try to fix the line ending problem 
... at github when using the browser for a PR.

It seems that the web interface inserts an additional CR
and doesn't stick to the LF line endings.

Not sure it helps though. It can't hurt though.
 2023-05-23 16:12:11 +02:00
Dirk WetterandGitHub f71619326d Merge pull request #2362 from drwetter/fix_2361_dnsminimal 
Fix misleading output
 2023-05-16 10:44:56 +02:00
Dirk Wetter 9b8dc3a07e Fix misleading output 
... when instructed to do no DNS queries at all
 2023-05-16 09:05:04 +02:00
Dirk WetterandGitHub be987d17a0 Merge pull request #2360 from mum-viadee/run_renego_sni_patch 
Secure renegotiations tests need servername for servers that use SNI
 2023-05-15 15:26:37 +02:00
Dirk WetterandGitHub e33e0bc204 Update testssl.sh 
clarify comment
 2023-05-15 15:04:59 +02:00
Dirk WetterandGitHub aa5235e658 Merge pull request #2346 from Odinmylord/3.1dev 
Add information to RSA-PSS report
 2023-04-01 09:51:27 +02:00
Dirk WetterandGitHub a04291fdb1 Merge pull request #2352 from dcooper16/pss_cert_tls13 
Find RSASSA-PSS certificates with TLS 1.3
 2023-03-31 16:38:14 +02:00
Dirk WetterandGitHub 13b42069d5 Merge pull request #2353 from dcooper16/brainpooltls13 
Add support for brainpool curves with TLS 1.3
 2023-03-31 16:36:33 +02:00
Dirk WetterandGitHub 82fbd8076e Merge pull request #2347 from drwetter/suse_docker 
Switching from Alpine Image to multistaged opensuse/leap
 2023-03-24 09:23:26 +01:00
Dirk 91f3d9716b amending previous commit 2023-03-23 15:05:15 +01:00
Dirk 90aa86ce6b add another contributor and change 
(not related to this PR but it'll be forgotten otherwise)
 2023-03-23 14:45:51 +01:00
Dirk WetterandGitHub f95d0dd09a Merge pull request #2328 from drwetter/w4ntun-merge 
fixed DNS via Proxy
 2023-03-23 14:31:17 +01:00
Dirk bad5dedf42 correcting Brennan's name 2023-03-23 14:22:05 +01:00
Dirk 48a597e19d don't forget the kudos ;-) 2023-03-23 09:11:14 +01:00
Dirk WetterandGitHub 37c17a5e09 Merge pull request #2344 from polarathene/refactor/dockerfile-to-opensuse 
refactor(dockerfile): Change base Alpine (3.17) => openSUSE Leap (15.4)
 2023-03-22 11:10:21 +01:00
Dirk d001bba86b Finalize DNS via Proxy 
See #2328, original PR #2295 from @w4ntun .

Formally testssl.sh returned an error when it wasn't not possible to determine IP
addresses through DNS resolution, even if --proxy and --ip=proxy flags are set.
The main function always tried to determine IP addresses via DNS and exits with
a fatal error if it cannot do it. Although the client cannot get the IP, the
proxy could, so the SSL/TLS analysis is still possible.

This PR allows the analysis for an HTTP service via a proxy server and the DNS
traffic can be sent directly or through the proxy using the flag --ip=proxy.

ATTENTION: This may be a breaking change for those who don't have a local resolver.
They now have to add --ip=proxy.

In addition:
* help() was amended to add --ip=proxy (was only in the ~i/doc dir before)
* amending ~/doc dir to document it's better to add --nodns=min when there's
  no local resolver
 2023-03-21 19:40:40 +01:00
Dirk WetterandGitHub cb451777d2 Merge pull request #2338 from drwetter/CAstores_update 
CA astores update
 2023-03-18 20:19:03 +01:00
Dirk Wetter aac696b0a0 Updated root CA stores 2023-03-17 18:06:57 +01:00
Dirk Wetter 6106887fdd Update DST CA 2023-03-17 18:06:03 +01:00
Dirk Wetter 419aae3c98 updates docu to reflekt actual status 2023-03-17 18:05:24 +01:00
Dirk WetterandGitHub 2659a13086 Merge pull request #2336 from drwetter/drwetter-patch-4 
Update codespell.yml
 2023-03-12 18:12:29 +01:00
Dirk WetterandGitHub 6cea273a68 Update codespell.yml 
add exception for aNULL which should work now
 2023-03-12 17:55:10 +01:00
Dirk WetterandGitHub b84e182ca2 Merge pull request #2332 from drwetter/sanitize_fileout 
Make sure control chars from HTTP header don't end up in html,csv,json
 2023-03-12 16:18:20 +01:00
Dirk WetterandGitHub 83f67b4fb7 Merge pull request #2333 from drwetter/drwetter-patch-4 
Update .gitignore
 2023-03-12 16:00:11 +01:00
Dirk WetterandGitHub 8643ed4c72 Update .gitignore 2023-03-12 15:57:01 +01:00
Dirk Wetter cacd8c57b1 Add variable htmlfile + filter GOST message 
... which is needed for newer LibreSSL/OpenSSL versions
 2023-03-12 15:09:24 +01:00
Dirk Wetter 2e33c483dd remove comma in tr as it was interpreted as such 2023-03-12 14:52:11 +01:00
Dirk Wetter fab67d0cca Remove CR in server banner 
... which caused a problem in t/32_isHTML_valid.t.

Also the test for an empty server banner was simplified
 2023-03-12 14:00:55 +01:00
Dirk Wetter d298b41d2c add aNULL exception to codespell 2023-03-11 14:06:47 +01:00
Dirk Wetter 06506b371e Make sure control chars from HTTP header don't end up in html,csv,json 
This addresses the bug #2330 by implementing a function which removes
control characters from the file output format html,csv,json at the
output.

In every instance called there's a check before whether the string
contains control chars, hoping it'll save a few milli seconds.

A tr function is used, omitting LF.

It doesn't filter the terminal output and the log file output.
 2023-03-11 13:38:28 +01:00
Dirk 9afa277c02 another indent correction 2023-03-03 12:50:02 +01:00
Dirk 2b6bd2f1dd fix indentation 2023-03-03 12:47:12 +01:00
Dirk 581788ff39 Merge branch '3.1dev' of https://github.com/w4ntun/testssl.sh into w4ntun-3.1dev 2023-03-03 12:31:26 +01:00
Dirk WetterandGitHub 88763f47a8 Merge pull request #2326 from drwetter/fix_mime-type 
Fix Accept Header
 2023-02-20 20:29:14 +01:00
Dirk a14fc5bdcf Fix Accept header 
see #2325.

"whenever HTTP/1.1 is used then the Accept header uses "text/*" as a MIME type.
This causes some minor issues with some of the checks we are doing"
 2023-02-20 15:01:40 +01:00
Dirk WetterandGitHub e57527f3ec Merge pull request #2321 from drwetter/align_json+terminal@run_cipherlists 
Rename 3 jsonIDs in run_cipherlists(): breaking change
 2023-02-08 17:07:42 +01:00
Dirk WetterandGitHub 8260ca16e2 Merge pull request #2309 from polarathene/chore/dockerfile-improved-copy 
chore: Use a single `COPY` by better leveraging `.dockerignore` patterns
 2023-02-07 12:23:04 +01:00
Dirk WetterandGitHub 363c0d0a69 Merge pull request #2323 from drwetter/drwetter-patch-4 
Remove mkdir in Dockerfile
 2023-02-07 10:29:08 +01:00
Dirk WetterandGitHub f914423978 Remove mkdir in Dockerfile 
see https://github.com/drwetter/testssl.sh/pull/2312#pullrequestreview-1286620850
 2023-02-07 10:28:26 +01:00