Commit Graph

  • 48bab2d57b Update Readme.md Dirk Wetter 2015-04-24 16:52:08 +0200
  • ae1abda571 Update Readme.md Dirk Wetter 2015-04-24 16:52:08 +0200
  • 63ca8c6520 - more thourough what has been done Dirk 2015-04-23 09:25:28 +0200
  • 150fb671bb - more thourough what has been done Dirk 2015-04-23 09:25:28 +0200
  • 7cbb8150a4 Update Readme.md Dirk Wetter 2015-04-23 08:48:28 +0200
  • b492031b95 Update Readme.md Dirk Wetter 2015-04-23 08:48:28 +0200
  • 3c7620bd8d - RC4 has now 2 CVEs and cipher per default are displayed short - introducng a variable name LONG which for certain funcs shows broad output with hexc, cipher, KX, etc. - FIX: regression not showing security headers - introducing VULN_THRESHLD Dirk 2015-04-22 18:24:39 +0200
  • 1ea7a0947f - RC4 has now 2 CVEs and cipher per default are displayed short - introducng a variable name LONG which for certain funcs shows broad output with hexc, cipher, KX, etc. - FIX: regression not showing security headers - introducing VULN_THRESHLD Dirk 2015-04-22 18:24:39 +0200
  • c4bf117393 - FIX #83 - emphasize also OS names in HTTP headers Dirk 2015-04-22 15:22:53 +0200
  • 3891f5b13b - FIX #83 - emphasize also OS names in HTTP headers Dirk 2015-04-22 15:22:53 +0200
  • a4f1873f63 - FIX for complete bailing out Dirk 2015-04-22 11:56:13 +0200
  • 06bd8b2517 - FIX for complete bailing out Dirk 2015-04-22 11:56:13 +0200
  • b5ac31c20c - reordering code so that all attacks are together - RC4 is now really omitted in PFS test - cleanup of some comments Dirk 2015-04-22 10:33:44 +0200
  • bafce6edce - reordering code so that all attacks are together - RC4 is now really omitted in PFS test - cleanup of some comments Dirk 2015-04-22 10:33:44 +0200
  • c4facbbecc typo Dirk 2015-04-21 08:14:36 +0200
  • c751e9f459 typo Dirk 2015-04-21 08:14:36 +0200
  • 709bb758fe - better compatibility with windows 2003 server - all long options are advertised now as with dashes and not underscore - cosmetic stuff Dirk 2015-04-20 10:05:01 +0200
  • 5bec0a16c9 - better compatibility with windows 2003 server - all long options are advertised now as with dashes and not underscore - cosmetic stuff Dirk 2015-04-20 10:05:01 +0200
  • 46a611ac29 FIX for #82 Dirk 2015-04-18 23:03:16 +0200
  • 7b6dba6369 FIX for #82 Dirk 2015-04-18 23:03:16 +0200
  • 3e2ed654c2 Indicated freeze Dirk Wetter 2015-04-16 21:05:23 +0200
  • 3f0f489f50 Indicated freeze Dirk Wetter 2015-04-16 21:05:23 +0200
  • 9b1657ee06 - BUGFIX: IIS server lead to false pisitive if SSLv3 was enabled (timeout was faster then socket resply) - FIX: CORS header not labeled as green - NEW: Now also STARTTLS works with all cmd line options and is absolutely doing the same stuff! (integrated starttls() into parse_hn_port() ) - option --mx needed to be changed because of starttls - regression fix: exec for socket doesn't play nice with stderr redirect (probably bash bug) - added some env options to cmd line as long args (--assuming-http,--ssl_native, --color, debug, --sneaky, --warnings) - threw away getent as it doesn't work under Linux && not network && localhost (replaced by grep) - SSL-POODLE is not labeled anymore experimental - HB+CCS are called while checking STARTTLS but given a hint that its not yet supported - added more env vars to debug output - cleanups Dirk 2015-04-16 20:36:17 +0200
  • 5625ee536e - BUGFIX: IIS server lead to false pisitive if SSLv3 was enabled (timeout was faster then socket resply) - FIX: CORS header not labeled as green - NEW: Now also STARTTLS works with all cmd line options and is absolutely doing the same stuff! (integrated starttls() into parse_hn_port() ) - option --mx needed to be changed because of starttls - regression fix: exec for socket doesn't play nice with stderr redirect (probably bash bug) - added some env options to cmd line as long args (--assuming-http,--ssl_native, --color, debug, --sneaky, --warnings) - threw away getent as it doesn't work under Linux && not network && localhost (replaced by grep) - SSL-POODLE is not labeled anymore experimental - HB+CCS are called while checking STARTTLS but given a hint that its not yet supported - added more env vars to debug output - cleanups Dirk 2015-04-16 20:36:17 +0200
  • 519f0ad699 - FIX regression: more_flags execution was missing - FIX regression: capitalized/all lowercase headers weren't detected - if socksend is blocked (IDS) output looks better and is reported as test didn't succeed - no secure cookie or Httponly will be marked as brown - tput color yellow is now brown Dirk 2015-04-14 13:16:43 +0200
  • f682c5ceea - FIX regression: more_flags execution was missing - FIX regression: capitalized/all lowercase headers weren't detected - if socksend is blocked (IDS) output looks better and is reported as test didn't succeed - no secure cookie or Httponly will be marked as brown - tput color yellow is now brown Dirk 2015-04-14 13:16:43 +0200
  • e0dbef62e6 - more robust grep >=2.20, e.g Debian 8.0 (thx @stevenb18) - FIX: false positive for breach while testing google.com (referer header was hardcoded to google.com) Dirk 2015-04-14 10:15:07 +0200
  • 9d5168dbb5 - more robust grep >=2.20, e.g Debian 8.0 (thx @stevenb18) - FIX: false positive for breach while testing google.com (referer header was hardcoded to google.com) Dirk 2015-04-14 10:15:07 +0200
  • 40baa7c163 - FIX (regression): -V - logic of some ENV variables changed (attention!) - included some ENV as long options (not in the help yet) - decentralized http check for breach - if openssl is not executable it bails out better now - help function now exits Dirk 2015-04-13 22:55:40 +0200
  • 683e9dccab - FIX (regression): -V - logic of some ENV variables changed (attention!) - included some ENV as long options (not in the help yet) - decentralized http check for breach - if openssl is not executable it bails out better now - help function now exits Dirk 2015-04-13 22:55:40 +0200
  • 07394d2d17 Merge branch 'master' of github.com:drwetter/testssl.sh Dirk 2015-04-10 15:16:20 +0200
  • 1043c40a60 Merge branch 'master' of github.com:drwetter/testssl.sh Dirk 2015-04-10 15:16:20 +0200
  • b8384eceff - underline CN, SAN and issuer deutschepost case (see sourceforge.net/p/ssllabs/mailman/message/33764851/) Dirk 2015-04-10 15:15:47 +0200
  • a12d39769f - underline CN, SAN and issuer deutschepost case (see sourceforge.net/p/ssllabs/mailman/message/33764851/) Dirk 2015-04-10 15:15:47 +0200
  • c07e37be27 Merge 7994fab035 into bfcd684e19 #63 Peter Mosmans 2015-04-10 08:30:41 +0000
  • 79ee5b377a Update Readme.md Dirk Wetter 2015-04-10 10:13:30 +0200
  • bfcd684e19 Update Readme.md Dirk Wetter 2015-04-10 10:13:30 +0200
  • b670c01f36 Update Readme.md Dirk Wetter 2015-04-09 22:24:57 +0200
  • 9ebf112858 Update Readme.md Dirk Wetter 2015-04-09 22:24:57 +0200
  • b0c68d4429 FIX: missing server preferences, NEW: each cipher server preferences per protocol! Dirk 2015-04-09 22:08:48 +0200
  • 53e0955dfb FIX: missing server preferences, NEW: each cipher server preferences per protocol! Dirk 2015-04-09 22:08:48 +0200
  • 9945ef0e81 - Dirk 2015-04-09 21:45:22 +0200
  • 7f984ea83f - Dirk 2015-04-09 21:45:22 +0200
  • 5051eb3d5d - fixes to changes from Peter's better cmd line parsing - cosmetc improvements (vulneraibilities) Dirk 2015-04-09 21:42:52 +0200
  • a98161acc9 - fixes to changes from Peter's better cmd line parsing - cosmetc improvements (vulneraibilities) Dirk 2015-04-09 21:42:52 +0200
  • cb98920733 Merge pull request #79 from PeterMosmans/refactoring Dirk Wetter 2015-04-09 21:38:29 +0200
  • eb73ffc053 Merge pull request #79 from PeterMosmans/refactoring Dirk Wetter 2015-04-09 21:38:29 +0200
  • 28518abb55 Removed GNU getopt Peter Mosmans 2015-04-07 18:05:52 +1000
  • c8d169cc0f Removed GNU getopt #79 Peter Mosmans 2015-04-07 18:05:52 +1000
  • 2009cfef26 Refactored major parts of code Peter Mosmans 2015-03-22 21:42:07 +1000
  • 9780e83895 Refactored major parts of code Peter Mosmans 2015-03-22 21:42:07 +1000
  • 44b31a1c54 FIX #80: show HTTP 401 Dirk 2015-04-02 13:35:22 +0200
  • 84aca9d9a3 FIX #80: show HTTP 401 Dirk 2015-04-02 13:35:22 +0200
  • 80f932ca30 NEW: added security headers Dirk 2015-04-02 13:04:57 +0200
  • 2cc56c4d1f NEW: added security headers Dirk 2015-04-02 13:04:57 +0200
  • 9ea84ee6ec - got rid of "strings" Dirk 2015-04-02 12:19:24 +0200
  • 8da96f78f2 - got rid of "strings" Dirk 2015-04-02 12:19:24 +0200
  • 348f651fc8 - updated binaries from Peter. Necessary because handshake under rare circumstances failed (routines:tls1_setup_key_block:cipher or hash unavailable:t1_enc.c:802. SLES 12 server, some ciphers under TLS 1.2 Dirk 2015-04-02 11:46:12 +0200
  • 4bbd19ba03 - updated binaries from Peter. Necessary because handshake under rare circumstances failed (routines:tls1_setup_key_block:cipher or hash unavailable:t1_enc.c:802. SLES 12 server, some ciphers under TLS 1.2 Dirk 2015-04-02 11:46:12 +0200
  • 7b9c125046 protocol check via sockets now also for SSLv3 Dirk 2015-03-31 10:34:30 +0200
  • 940f51e74b protocol check via sockets now also for SSLv3 Dirk 2015-03-31 10:34:30 +0200
  • 5e9bb1c7e2 cleanups / bsd date in tls time Dirk 2015-03-30 23:09:19 +0200
  • 9ed58b6202 cleanups / bsd date in tls time Dirk 2015-03-30 23:09:19 +0200
  • 74b6bd7241 rechi Dirk 2015-03-30 15:03:29 +0200
  • 6c30386278 rechi Dirk 2015-03-30 15:03:29 +0200
  • 9bd1b44270 open fixes from Rechi (pull request $67) Dirk 2015-03-30 14:59:44 +0200
  • d9ae35fc7e open fixes from Rechi (pull request $67) Dirk 2015-03-30 14:59:44 +0200
  • f8679c8703 Merge 1ddb9e5358 into 7f4fc5902e #78 Peter Mosmans 2015-03-22 02:38:47 +0000
  • 1ddb9e5358 Refactored major parts of code #78 Peter Mosmans 2015-03-22 12:33:43 +1000
  • 9b03aca97b Merge remote-tracking branch 'upstream/master' Peter Mosmans 2015-03-20 11:16:59 +1000
  • 77fd58e556 Merge pull request #75 from feld/tr Dirk Wetter 2015-03-19 09:14:54 +0100
  • 7f4fc5902e Merge pull request #75 from feld/tr Dirk Wetter 2015-03-19 09:14:54 +0100
  • c0e6777666 Merge pull request #76 from feld/printf Dirk Wetter 2015-03-19 09:14:32 +0100
  • f4c9f692d2 Merge pull request #76 from feld/printf Dirk Wetter 2015-03-19 09:14:32 +0100
  • 1791af3659 Fix variable directly referenced in printf Mark Felder 2015-03-15 09:18:01 -0500
  • 819e6e6163 Fix variable directly referenced in printf #76 Mark Felder 2015-03-15 09:18:01 -0500
  • bd95459c8d Using square brackets in tr results in trying to match/replace them Mark Felder 2015-03-15 09:02:05 -0500
  • 63a1df1fe2 Using square brackets in tr results in trying to match/replace them #75 Mark Felder 2015-03-15 09:02:05 -0500
  • 7157d094bb Дилян Dirk 2015-03-17 22:14:05 +0100
  • 0d3b7f343f Дилян Dirk 2015-03-17 22:14:05 +0100
  • 485f0f8080 - FIX for 3des cipher report (thx Дилян) Dirk 2015-03-17 22:12:25 +0100
  • 2d0bfca343 - FIX for 3des cipher report (thx Дилян) Dirk 2015-03-17 22:12:25 +0100
  • 1de535cc25 - added two pairs of ciphers to server preference (thx Dilian) Dirk 2015-03-17 22:02:23 +0100
  • ca6ca5d47e - added two pairs of ciphers to server preference (thx Dilian) Dirk 2015-03-17 22:02:23 +0100
  • 79396acf97 - working tls handshake with bash sockets (not yet in production, hint: see option "-q" in the bottom) Dirk 2015-03-17 18:11:18 +0100
  • 2faad9de9a - working tls handshake with bash sockets (not yet in production, hint: see option "-q" in the bottom) Dirk 2015-03-17 18:11:18 +0100
  • c4877799ec - check whether openssl is executable - spaces to tabs - adding hint to "aha" in help Dirk 2015-03-17 15:14:58 +0100
  • c159af7f42 - check whether openssl is executable - spaces to tabs - adding hint to "aha" in help Dirk 2015-03-17 15:14:58 +0100
  • 761e854610 - FIX for date --> applied to other BSD systems too - FIX for SNI output as it doensn';t make sense for non HTTP servives - lines for RC4 and PFS shortenedA - display all MX records to test before testing - removed LOCERR, added CCS_MAX_WAITSOCK, HEARTBLEED_MAX_WAITSOCK Dirk 2015-03-17 12:22:21 +0100
  • 263535520f - FIX for date --> applied to other BSD systems too - FIX for SNI output as it doensn';t make sense for non HTTP servives - lines for RC4 and PFS shortenedA - display all MX records to test before testing - removed LOCERR, added CCS_MAX_WAITSOCK, HEARTBLEED_MAX_WAITSOCK Dirk 2015-03-17 12:22:21 +0100
  • c8090600b6 - some internal code internal cleanups - minor cosmetic output corrections - preparation for bash sockets for SSLv3 to TLS 1.2 Dirk 2015-03-16 00:22:51 +0100
  • f8ba69f9fb - some internal code internal cleanups - minor cosmetic output corrections - preparation for bash sockets for SSLv3 to TLS 1.2 Dirk 2015-03-16 00:22:51 +0100
  • 41c4ed94c1 further improvements through shellcheck Dirk 2015-03-15 16:59:29 +0100
  • 4556108a72 further improvements through shellcheck Dirk 2015-03-15 16:59:29 +0100
  • 639258cfe0 FIX #74 for sed BSD: doesn't like inline \n headline for BEAST was missing Dirk 2015-03-15 16:10:14 +0100
  • 68695bbad3 FIX #74 for sed BSD: doesn't like inline \n headline for BEAST was missing Dirk 2015-03-15 16:10:14 +0100
  • c2ece82d9b - FIX: regression for wc -l w/o cat (3x) - removal of unneccessary waitpid, inline Dirk 2015-03-15 14:41:34 +0100
  • 655944bd4d - FIX: regression for wc -l w/o cat (3x) - removal of unneccessary waitpid, inline Dirk 2015-03-15 14:41:34 +0100
  • bdd0602c1f - prework for checking hpkp fingerprints Dirk 2015-03-15 10:18:37 +0100
  • fbd383f345 - prework for checking hpkp fingerprints Dirk 2015-03-15 10:18:37 +0100