aa4e9a4d41
Merge pull request #2641 from testssl/sieve_fix
...
two sieve fixes to make it work
2025-01-29 16:29:38 +01:00
b054b5d687
two sieve fixes
...
* one logical error
* removing check for trailing space for OK
2025-01-28 22:15:17 +01:00
f95ff7ab3e
Merge pull request #2640 from forced-request/3.2
...
Readme: Misformatted Markdown
2025-01-28 20:57:53 +01:00
b84dd06b36
broken markdown
2025-01-28 13:46:12 -05:00
8339a730f5
Merge pull request #2638 from testssl/dependabot/github_actions/docker/build-push-action-6.13.0
...
Bump docker/build-push-action from 6.12.0 to 6.13.0
2025-01-27 21:15:22 +01:00
e068c52e28
Merge pull request #2639 from testssl/fix_ci_runs
...
Fix ci runs
2025-01-27 20:54:29 +01:00
e41b488172
Merge branch 'fix_ci_runs' into dependabot/github_actions/docker/build-push-action-6.13.0
2025-01-27 20:36:49 +01:00
d93549e327
fix match expr
2025-01-27 20:08:11 +01:00
cdf5cf7b97
remove + @ beginning of line
2025-01-27 17:20:39 +01:00
e17bbfd8c6
Merge branch 'fix_ci_runs' into dependabot/github_actions/docker/build-push-action-6.13.0
2025-01-27 16:42:15 +01:00
ef13122f4f
fix typo
2025-01-27 16:39:02 +01:00
b984ae5ea2
minor stuff
2025-01-27 16:37:04 +01:00
8e39d161a8
cleaner code
2025-01-27 16:36:42 +01:00
0640eb9004
Several CI fixes
...
- don't output stdin on terminal
- adapt to different google.com ip addresses
- cleaner code
2025-01-27 16:33:58 +01:00
d06d50280d
Bump docker/build-push-action from 6.12.0 to 6.13.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.12.0 to 6.13.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v6.12.0...v6.13.0 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-27 00:27:50 +00:00
04c98d93ab
Merge pull request #2628 from testssl/diffing_openssls
...
Add unittest for different openssl versions
2025-01-24 21:38:26 +01:00
ce8984706e
Finalize unit test
...
* pattern search + replace for tls_sockets() vs. openssl
* better error handling for invocations with perl functions system + die
2025-01-24 20:36:59 +01:00
cbaa813a40
Merge branch '3.2' into diffing_openssls
2025-01-24 19:47:40 +01:00
d115b2ebbf
Merge pull request #2635 from testssl/fix_2633
...
Fix bug when legacy NPN is tested against a TLS 1.3 host
2025-01-24 19:44:49 +01:00
d9b293f6c7
fix typo
2025-01-24 18:51:11 +01:00
43a0099fbc
Fix bug when legacy NPN is tested against a TLS 1.3 host
...
When testing a TLS 1.3 host s_client_options used TLS 1.3 ciphers to test
for NPN. As that is not implemented we nee dto make sure any other version
is used.
This PR ensures that --after testing whether it's a TLS 1.3-only host
where this test doesn't make any sense in the first place.
Fix for #2633
2025-01-24 18:46:07 +01:00
5c1232b9dc
Merge pull request #2566 from testssl/bump_version
...
Bump version to 3.2rc4
2025-01-24 15:47:11 +01:00
76cdf3166a
fix typo
2025-01-24 14:53:52 +01:00
bf75a91bc7
Merge branch '3.2' into bump_version
2025-01-24 14:41:21 +01:00
5eeab6484f
Merge pull request #2632 from testssl/Tazmaniac-client-renego-refactoring
...
Tazmaniac client renego refactoring
2025-01-24 14:24:43 +01:00
002b91192c
fix spelling
2025-01-24 13:50:35 +01:00
49db77e63a
Conflicts resolved
2025-01-24 13:44:19 +01:00
163d744c13
Add recent and bigger changes
...
From today back to 1f37a8406f
2025-01-24 11:32:41 +01:00
0042b6313e
s/drwetter/testssl
...
For the remaining occurences. Except dockerhub which needs to be solved.
2025-01-24 11:15:55 +01:00
69d6a50696
Merge branch '3.2' into bump_version
2025-01-24 11:05:00 +01:00
0539688c06
Merge pull request #2631 from testssl/corydalis10-3.2
...
Improve CONTRIBUTING.md
2025-01-23 17:42:29 +01:00
b185b1bea9
Fix typo
2025-01-23 17:41:36 +01:00
90f1e59e9f
Merge #2618 and doing some overdue amendments
2025-01-23 17:37:32 +01:00
8f054c6f12
Merge branch '3.2' of https://github.com/corydalis10/testssl.sh into corydalis10-3.2
2025-01-23 16:49:12 +01:00
9e9334f3c8
Merge pull request #2619 from testssl/co_header
...
Add more security headers
2025-01-23 11:47:34 +01:00
4efe324ef7
Fix round bracket and remove obsolete comment
2025-01-23 10:45:15 +01:00
fb3921cd1b
Edit CONTRIBUTING.md
2025-01-23 13:10:12 +09:00
7d919d494c
Merge pull request #2629 from testssl/misc
...
Remove --nsa in help() and add --forward-secrecy instead
2025-01-22 23:37:28 +01:00
d7da22d598
Finalize check
...
* use system with @args so that we can query the return value
* code style improved for readability
* diff shows the filtered difference
* ok instead of cmp_ok to show not the whole content of vars
2025-01-22 23:33:35 +01:00
4df0d9e4c3
Re-added the ) to make the action word (why??)
2025-01-22 23:32:39 +01:00
207b902109
Merge branch '3.2' into co_header
2025-01-22 22:50:00 +01:00
ad912ea332
Fix typo + tags
2025-01-22 20:05:19 +01:00
12036fb6c8
Update baseline scan + add/deprecate security headers
2025-01-22 19:54:34 +01:00
a1c2dc7c72
Remove --nsa in help() and add --forward-secrecy instead
...
Both are possible to use
2025-01-22 19:19:16 +01:00
ba58458909
Restrict tests to those which use openssl
2025-01-22 18:37:48 +01:00
37d987684e
remove comment sign from testing
2025-01-22 18:25:54 +01:00
a499233df2
Add unittest for diffrent openssl versions
...
This adds a unit test to compare a run against google with the supplied openssl
version vs /usr/bin/openssl .
This would fix #2626 .
It looks like there are still points to clarify
* NPN output is different (bug)
* Newer openssl version claims it's ECDH 253 instead of ECDH 256.
* Newer openssl version claims for 130x cipher it's ECDH 253, via sockets it´s ECDH/MLKEM. This seems a bug (@dcooper)
A todo is also restricing the unit test to the one where openssl is being used. E.g. the ROBOT check and more aren't done with openssl. So there's no value checking this here.
2025-01-22 18:12:53 +01:00
17f2a5d5b9
Merge pull request #2622 from dcooper16/draft-kwiatkowski-tls-ecdhe-mlkem
...
Support draft-kwiatkowski-tls-ecdhe-mlkem
2025-01-22 11:03:11 +01:00
023fd0278a
Merge pull request #2625 from dcooper16/fix_x5519_and_x448_check
...
Fix checks for whether X25519 and X448 are supported
2025-01-22 11:01:25 +01:00
a85073bf0d
Fix checks for whether X25519 and X448 are supported
...
In some cases OpenSSL returns an "unsupported" message rather than a "not found" message if X25519 and X448 are not supported. This commit changes the check for whether X5519 and X448 are supported for checking for either response.
2025-01-21 09:10:33 -08:00
