Commit Graph

  • a50488c44f Handle --file option David Cooper 2017-02-09 17:03:21 -0500
  • 45379ce1f9 Fix subjectAltName indendation #628 David Cooper 2017-02-09 13:29:22 -0500
  • c92131c072 Don't collect number of bits in run_pfs() David Cooper 2017-02-09 11:45:29 -0500
  • d4455081f0 Wrap long lines David Cooper 2017-02-09 11:36:24 -0500
  • 1c5ef78913 Another update to HTML colors David Cooper 2017-02-08 15:16:51 -0500
  • be6bafaec4 Merge branch '2.9dev' into generate_html David Cooper 2017-02-08 10:04:14 -0500
  • 386aa92448 keep detected status of WSL / bash on windows in a variable, see also #620 Dirk 2017-02-08 09:08:05 +0100
  • 0200100750 see #620 Dirk 2017-02-08 08:58:28 +0100
  • 0b7e9b18b8 Merge pull request #620 from teward/2.9dev Dirk Wetter 2017-02-08 08:54:20 +0100
  • 0810f2a719 Merge pull request #609 from dcooper16/handle_supported_groups Dirk Wetter 2017-02-08 08:11:23 +0100
  • 0d993427a3 - enabling TLS 1.2 via sockets - enabling sockets in run_protocols STARTTLS per default - minor output polishing Dirk 2017-02-07 23:08:29 +0100
  • 2af8198f27 Change HTML colors David Cooper 2017-02-07 17:06:27 -0500
  • 6140aa8b8c Attempt to force system binaries for WSL #620 Thomas Ward 2017-02-07 15:59:09 -0500
  • dc9e3bfb58 Add option to create HTML David Cooper 2017-02-07 14:25:41 -0500
  • edb358b3e0 Merge pull request #595 from dcooper16/rename_ephemeral_DH_ciphers Dirk Wetter 2017-02-07 17:51:07 +0100
  • 4fab1830cb Merge branch '2.9dev' into handle_supported_groups #609 David Cooper 2017-02-06 13:49:05 -0500
  • f03ae865d8 Merge branch '2.9dev' into rename_ephemeral_DH_ciphers #595 David Cooper 2017-02-06 13:48:35 -0500
  • 48e264a193 fixed regression #611 Dirk 2017-02-06 17:47:17 +0100
  • f519e42507 Merge branch '2.9dev' into rename_ephemeral_DH_ciphers David Cooper 2017-02-06 08:48:45 -0500
  • 321d5e0c9d Merge branch '2.9dev' into handle_supported_groups David Cooper 2017-02-06 08:47:11 -0500
  • 54e0395969 Reverse #600 but leave the hook in here, ANSI code for strikethru Dirk 2017-02-06 11:06:59 +0100
  • 03daa1be35 Merge pull request #608 from dcooper16/neat_list_camelliagcm Dirk Wetter 2017-02-06 10:41:01 +0100
  • a9cddd7afb see #611 Dirk 2017-02-04 15:11:03 +0100
  • e95f9a8d0a Merge pull request #611 from dcooper16/print_two_CRL_or_OCSP_URI Dirk Wetter 2017-02-04 15:06:18 +0100
  • 3a21097cc5 HTTP/1.1 GET handler for #254 Dirk 2017-02-04 14:13:33 +0100
  • 59c3286775 Merge pull request #612 from dcooper16/update_fix_587 Dirk Wetter 2017-02-04 12:14:09 +0100
  • 8457c1ce9e corrected path to common_primes_file in logjam #617 AlGreed 2017-02-04 01:38:18 +0100
  • 513cbf0d65 Merge branch 'drwetter/2.9dev' into 2.9dev AlGreed 2017-02-04 00:32:28 +0100
  • 5046b80414 first draft of LUCKY13 (128 cipher limit has to be addressed) Dirk 2017-02-03 22:36:04 +0100
  • e18f5821d2 Merge branch '2.9dev' into rename_ephemeral_DH_ciphers David Cooper 2017-02-03 13:42:04 -0500
  • cb1d133528 preparing for lucky13 Dirk 2017-02-03 17:40:35 +0100
  • 79bfe1103c Merge branch '2.9dev' into update_fix_587 #612 David Cooper 2017-02-03 08:47:29 -0500
  • b2de5c4ac9 Merge branch '2.9dev' into print_two_CRL_or_OCSP_URI #611 David Cooper 2017-02-03 08:46:40 -0500
  • f273b5ed8c Merge branch '2.9dev' into handle_supported_groups David Cooper 2017-02-03 08:45:40 -0500
  • da59ea11c2 Merge branch '2.9dev' into neat_list_camelliagcm #608 David Cooper 2017-02-03 08:44:36 -0500
  • 1079a05d42 Merge branch '2.9dev' into rename_ephemeral_DH_ciphers David Cooper 2017-02-03 08:44:07 -0500
  • 925e1061b2 - renamed pr_svrty_minor --> pr_svrty_low to reflect the level literally - minor polishing Dirk 2017-02-03 13:03:22 +0100
  • b9232fd5d0 Fix TLS_FALLBACK_SCSV detection for non RFC compliants F5 loadbalancers. They pass now the test but get additonally penalized for their non compliance, see also https://github.com/drwetter/testssl.sh/issues/121#issuecomment-113790270 Dirk 2017-02-03 11:47:21 +0100
  • e7c7e7ba19 Update fix to 587 David Cooper 2017-02-02 15:52:32 -0500
  • e9d6ac8ad1 Fix Two CRL and/or two OCSP URLs David Cooper 2017-02-02 13:04:49 -0500
  • 7a378c44dc Merge branch '2.9dev' into handle_supported_groups David Cooper 2017-02-02 09:13:33 -0500
  • 898438ec17 Merge branch '2.9dev' into neat_list_camelliagcm David Cooper 2017-02-02 09:12:42 -0500
  • a9ffc5f61f Merge branch '2.9dev' into rename_ephemeral_DH_ciphers David Cooper 2017-02-02 09:12:03 -0500
  • ec7aa2481a - SWEET32. Note this is still NOT COMPLETE (ciphers!) and needs more testing Dirk 2017-02-02 14:42:06 +0100
  • 4775515bd7 Merge branch 'drwetter/2.9dev' into 2.9dev AlGreed 2017-02-02 09:16:22 +0100
  • f1eb3b85de Handle renaming of the Supported Elliptic Curves Extension David Cooper 2017-02-01 15:43:15 -0500
  • d93f7031ac Fix neat_list() for Camellia GCM David Cooper 2017-02-01 13:31:58 -0500
  • 36a353d398 Merge 3cd5f1f474 into c4c5130a39 #239 Konstantin Shalygin 2017-01-31 13:57:46 +0000
  • 11b5e00602 Merge branch '2.9dev' into rename_ephemeral_DH_ciphers David Cooper 2017-01-30 13:36:12 -0500
  • c0cf622aff Merge pull request #600 from dcooper16/unsupported_ciphers_in_litegrey Dirk Wetter 2017-01-30 18:29:57 +0100
  • 392dac0e39 Just print entire line in light grey #600 David Cooper 2017-01-30 09:32:47 -0500
  • 17db208756 Merge branch '2.9dev' into unsupported_ciphers_in_litegrey David Cooper 2017-01-30 09:02:15 -0500
  • 2a2f2b2c3b Merge branch '2.9dev' into rename_ephemeral_DH_ciphers David Cooper 2017-01-30 09:01:40 -0500
  • 2c363942fd Merge branch 'drwetter/2.9dev' into 2.9dev AlGreed 2017-01-29 16:31:02 +0100
  • a7dff83160 $NODE is fine, removing $MX_HOSTNAME, #603 Dirk 2017-01-29 10:46:35 +0100
  • 1e16ac8ad6 Merge pull request #603 from AlGreed/2.9dev Dirk Wetter 2017-01-29 10:40:23 +0100
  • f07c723d59 added mx hostname for json-pretty output #603 AlGreed 2017-01-28 18:11:39 +0100
  • 80314f0602 Merge branch 'drwetter/2.9dev' into 2.9dev AlGreed 2017-01-28 15:12:23 +0100
  • 2ea3789b91 Merge pull request #602 from AlGreed/2.9dev Dirk Wetter 2017-01-28 10:27:45 +0100
  • fcd208b2c9 ... #602 AlGreed 2017-01-28 08:09:02 +0100
  • 04c653646e ... AlGreed 2017-01-28 07:54:58 +0100
  • 29d6cbc125 Added support of multiple servers to json-pretty format; added fileout for smtp AlGreed 2017-01-28 07:17:58 +0100
  • ae6462fe65 Merge branch 'drwetter/2.9dev' into 2.9dev AlGreed 2017-01-28 00:13:22 +0100
  • 6a4d0e7020 Merge 32bbf42ec3 into c4c5130a39 #373 David Cooper 2017-01-26 00:08:44 +0000
  • d47601f413 Print unsupported ciphers in light grey David Cooper 2017-01-25 10:41:36 -0500
  • 55f2f3fe57 Merge branch 'master' into no_version_tolerance_test David Cooper 2017-01-25 10:22:13 -0500
  • 324fb059b3 Merge branch '2.9dev' into rename_ephemeral_DH_ciphers David Cooper 2017-01-25 09:11:55 -0500
  • 0bb792225e Merge pull request #599 from dcooper16/fix_tls_sockets_typo Dirk Wetter 2017-01-25 15:00:33 +0100
  • 1ee75689e0 Fix typo in tls_sockets() #599 David Cooper 2017-01-25 08:57:20 -0500
  • 597e87f330 Merge branch '2.9dev' into rename_ephemeral_DH_ciphers David Cooper 2017-01-24 16:09:19 -0500
  • bc31639179 Merge pull request #545 from dcooper16/cipher_order_sockets Dirk Wetter 2017-01-24 20:26:05 +0100
  • c09a77006e Rename cipher lists for run_logjam() David Cooper 2017-01-24 10:49:59 -0500
  • db4108cec5 Merge branch '2.9dev' into cipher_order_sockets #545 David Cooper 2017-01-24 08:46:40 -0500
  • 2a5d56a9d6 help aviod misunderstanding, see #594 and some reordering Dirk 2017-01-24 08:37:19 +0100
  • 156787adec Merge branch '2.9dev' into cipher_order_sockets David Cooper 2017-01-23 11:22:42 -0500
  • 4911aaf05b Fix #593 Dirk 2017-01-23 11:33:18 +0100
  • cc58223417 Merge branch 'master' of https://github.com/drwetter/testssl.sh #440 Oscar Koeroo (KPN-CISO) 2017-01-22 12:33:01 +0100
  • 8988411fbc Merge pull request #565 from dcooper16/run_server_preference_sockets Dirk Wetter 2017-01-21 19:55:37 +0100
  • f80e1ecfdb - enable CAA per default (#588) - hex2ascii() for converting strings - swap quoted output in -S to italic (mostly) Dirk 2017-01-21 19:43:07 +0100
  • f2303a0d79 - poodle output polishing - minor polish of #552 Dirk 2017-01-21 18:08:31 +0100
  • d448ebbc77 Merge pull request #552 from dcooper16/run_beast_sockets Dirk Wetter 2017-01-21 18:01:55 +0100
  • 2b440f15ea - polishing #570 - run_logjam() terminates if no local DH export ciphers are configured Dirk 2017-01-21 16:52:02 +0100
  • 20cc3bc435 Merge pull request #570 from dcooper16/run_ssl_poodle_sockets Dirk Wetter 2017-01-21 14:37:36 +0100
  • f3666a13c5 - add crypotsense prefined DH groups - final FIX #589 Dirk 2017-01-20 18:14:48 +0100
  • c4c5130a39 - FIX #591 (and in JSON for HSTS+HPKP too) - HSTS and HPKP have now similar output Dirk 2017-01-19 21:09:25 +0100
  • e083fab130 - run_logjam(): run_logjam(0 fixed error where logjam couldn't parse "ServerKeyExchange" message using SSL_NATIVE -- if TLS != 1.2 was returned - run_logjam(): determine dh bit size and based on this mark the common primes as more or less vulnerable - run_logjam(): renamed remaining dhe variable to dh - further house keeping in run_logjam() Dirk 2017-01-19 14:45:19 +0100
  • 9c3ab427b6 Merge pull request #590 from dcooper16/dhe_cipher_list Dirk Wetter 2017-01-18 22:08:43 +0100
  • e3d183e909 -output correction run_logjam - rename dhe to dh Dirk 2017-01-18 22:05:27 +0100
  • dcd37729f4 Generate list of all DHE ciphers #590 David Cooper 2017-01-18 15:16:13 -0500
  • 211ce0b3fd Merge branch '2.9dev' into run_ssl_poodle_sockets #570 David Cooper 2017-01-18 15:00:32 -0500
  • 0cdbe95302 Merge branch '2.9dev' into run_beast_sockets #552 David Cooper 2017-01-18 14:59:53 -0500
  • a016b946fd Merge branch '2.9dev' into run_server_preference_sockets #565 David Cooper 2017-01-18 14:59:07 -0500
  • 86ac32cd0d Merge branch '2.9dev' into cipher_order_sockets David Cooper 2017-01-18 14:57:59 -0500
  • 05d27ff1be - FIX for the last mess submitted ;-) Dirk 2017-01-18 18:09:39 +0100
  • 61b16a078a - file etc/common-primes was not edited correctly! Dirk 2017-01-18 16:38:09 +0100
  • 8bf7b6b31b forgot to save work, followup to 4433345b16 , #120, #589 Dirk 2017-01-18 16:23:18 +0100
  • 4433345b16 - first implementation (draft) of LOGJAM common primes, see #589, #120 - output polishing of run_drown() - polishing of run_logjam() - decrease severity to high for LOGJAM, see CVE rating Dirk 2017-01-18 15:53:01 +0100
  • b1c80512e6 first bunch of common primes, see #589 + #576 + #120. License of nmap is also GPLv2: no conflicts Dirk 2017-01-18 12:44:15 +0100
  • 643b80c541 Merge branch '2.9dev' into run_ssl_poodle_sockets David Cooper 2017-01-17 09:07:21 -0500
  • 149c822f38 Merge branch '2.9dev' into run_beast_sockets David Cooper 2017-01-17 09:05:52 -0500