Commit Graph

  • 7585ab60e5 fix Travis CI Dirk 2018-01-31 21:44:33 +01:00
  • 20d33da11b unifying output for missing must_staple xt and CT Dirk 2018-01-31 20:38:40 +01:00
  • d2d62a9c55 jsonID changed (server defaults), host certificate in JSON, HOSTCERT_TXT Dirk 2018-01-31 20:01:12 +01:00
  • 656016eae4 Changes to outputs: certificate start+end time, CRL+OCSP Dirk 2018-01-31 17:23:50 +01:00
  • af6ca18933 change certificate enddate not to contain the TZ offset Dirk 2018-01-31 16:37:22 +01:00
  • 02b5497864 remove string GMT from certificate start+end time Dirk 2018-01-29 23:54:22 +01:00
  • 01f7612bd0 add keys to server defaults, cert start/end time in GMT Dirk 2018-01-29 23:43:25 +01:00
  • 6d0123d33c changes + bug fix for certificate expiration time Dirk 2018-01-29 23:12:15 +01:00
  • d7a1236e9b Merge branch '2.9dev' of github.com:drwetter/testssl.sh into 2.9dev Dirk 2018-01-29 20:06:31 +01:00
  • 88cd5528e7 HOSTCERT_TXT populated, certificate end+startdate in JSON Dirk 2018-01-29 20:03:00 +01:00
  • 659a6176b6 Add TLS 1.3, better explanation for -6 Dirk 2018-01-28 12:47:05 +01:00
  • 4cb43733d6 Merge pull request #973 from dcooper16/tls13_run_server_defaults Dirk Wetter 2018-01-27 10:30:44 +01:00
  • 52feb4f578 Merge pull request #972 from dcooper16/fix_HRR Dirk Wetter 2018-01-27 10:18:40 +01:00
  • 018af9972f Merge pull request #974 from dcooper16/relabel_ec_bits Dirk Wetter 2018-01-27 10:16:58 +01:00
  • ee0b12bfca Label elliptic curve public keys as "EC" David Cooper 2018-01-26 17:27:10 -05:00
  • fa87f8ffd5 Add TLSv1.3 support for run_server_defaults() David Cooper 2018-01-26 16:56:31 -05:00
  • f8df2432ef Fix HelloRetryRequest David Cooper 2018-01-26 16:49:08 -05:00
  • c1d75f65ce polish screen output for (extended) keyusage Dirk 2018-01-26 17:02:00 +01:00
  • 61764f332c Fix error where cipherlist checks run always Dirk 2018-01-26 15:57:42 +01:00
  • efbc1a4e92 Minor changes on id and findings Dirk 2018-01-25 17:35:47 +01:00
  • ae94b392e1 Merge pull request #951 from dcooper16/extract_certificates_function Dirk Wetter 2018-01-25 16:55:00 +01:00
  • c8178b03d9 Merge branch '2.9dev' into extract_certificates_function Dirk Wetter 2018-01-25 16:39:30 +01:00
  • e446c80851 Merge pull request #971 from drwetter/new_json_for_serverdefaults Dirk Wetter 2018-01-25 16:11:24 +01:00
  • 513d21244f Merge branch '2.9dev' into new_json_for_serverdefaults Dirk Wetter 2018-01-25 15:49:44 +01:00
  • ed4262f74f Further changes to JSON ID + finding for JSON, std cipherlists Dirk 2018-01-25 15:05:57 +01:00
  • 288175a61f Define extract_certificates() function David Cooper 2017-12-22 11:42:24 -05:00
  • 1cec0181af More changes ID + Finding for JSON outside server defaults Dirk 2018-01-23 15:16:05 +01:00
  • cd45a2ec19 Merge pull request #969 from drwetter/keyUsage Dirk Wetter 2018-01-23 12:10:07 +01:00
  • c4e4720133 slight contextual rearrangements for help() Dirk 2018-01-23 11:49:53 +01:00
  • 8327171935 simplify few cert checks messages + hopefullt make Travis work again Dirk 2018-01-23 11:46:24 +01:00
  • 56aa009491 backport #968 Dirk 2018-01-23 10:13:46 +01:00
  • 2e54b9a439 Merge pull request #968 from jpstevens/patch-1 Dirk Wetter 2018-01-23 09:50:09 +01:00
  • 0ec5586dfb Changing JSON objects in server defaults ATTENTION: breaking change!! Dirk 2018-01-22 23:56:03 +01:00
  • 4cca15027d Fix typos in HSTS tests: days -> seconds Jack Stevens 2018-01-22 22:46:48 +00:00
  • c5060547bd Merge pull request #950 from dcooper16/tls_fallback_scsv Dirk Wetter 2018-01-22 22:39:09 +01:00
  • f5c2199369 Polishing #965 Dirk 2018-01-22 19:50:50 +01:00
  • 3b9a82b0cc Merge branch 'dcooper16-keyUsage' into keyUsage Dirk 2018-01-22 12:13:56 +01:00
  • f0c9875696 Check keyUsage and extended key usage extensions David Cooper 2018-01-19 11:31:45 -05:00
  • db0efc48b5 run_tls_fallback_scsv() improvements David Cooper 2017-12-21 16:22:33 -05:00
  • 7a10e5514f add a comment for STARTTLS + TLS 1.3 Dirk 2018-01-19 16:35:28 +01:00
  • 41635ce53f Merge pull request #963 from dcooper16/fix_962 Dirk Wetter 2018-01-19 16:30:40 +01:00
  • 58d495e249 Fix #962 David Cooper 2018-01-19 09:54:21 -05:00
  • e40e4007b1 backport of #961 (client auth and broken json-pretty) Dirk 2018-01-19 14:18:10 +01:00
  • bce69e8583 Merge pull request #961 from tissieres/2.9dev Dirk Wetter 2018-01-19 14:10:29 +01:00
  • 966ef3286e Merge pull request #958 from dcooper16/tls13_draft23 Dirk Wetter 2018-01-19 12:55:43 +01:00
  • f55e8888af Merge pull request #960 from dcooper16/tls13_bugfix Dirk Wetter 2018-01-19 12:52:39 +01:00
  • e0d6bb3aba Certificate-based auth host scanning produces invalid JSON output Cédric Tissières 2018-01-18 14:30:22 +01:00
  • 42bea1d0cf TLSv1.3 related bugfix David Cooper 2018-01-17 11:06:21 -05:00
  • 7387f87597 Add support for TLSv1.3 draft 23 David Cooper 2018-01-12 17:31:54 -05:00
  • b0f4253ff2 add X-Permitted-Cross-Domain-Policies Dirk 2018-01-14 12:22:06 +01:00
  • 77071bf50d a few IBM data power headers added Dirk 2018-01-11 17:28:48 +01:00
  • 16de7fa1b7 Merge branch '2.9dev' of github.com:drwetter/testssl.sh into 2.9dev Dirk 2018-01-03 21:43:38 +01:00
  • 407358623e Fix, header restore, TLS13 ciphers Dirk 2018-01-03 21:41:09 +01:00
  • a3b4609d24 make 0964cbc5d3 easier in execution (session resumption) Dirk 2017-12-31 21:10:41 +01:00
  • 0964cbc5d3 OpenSSL 1.1.1 seems to have changed the behaviour regarding Session ID support. If the server doesn't supply an session identifier the file is just empty. Dirk 2017-12-31 11:49:25 +01:00
  • 75e9add0f1 make ID for session_resumption_id common (allo lowercase) Dirk 2017-12-31 09:12:16 +01:00
  • c4c8ff4434 fix needed answer "YES" in protocol section Dirk 2017-12-29 23:14:14 +01:00
  • 85c470fcdc Merge branch 'jp-host+port' into 2.9dev Dirk 2017-12-27 10:14:21 +01:00
  • 0bc1f6f708 make MAX_PARALLEL and MAX_WAIT_TEST configurable + documentation Dirk 2017-12-27 09:50:34 +01:00
  • 9981d76879 Move target host + port to different JSON (pretty) object Dirk 2017-12-25 17:42:27 +01:00
  • eeaceb2845 Merge pull request #949 from dcooper16/run_crime_ossl111 Dirk Wetter 2017-12-25 16:56:03 +01:00
  • 7a1fb66957 Further (slight) update on cipher quality coloring Dirk 2017-12-25 14:55:12 +01:00
  • 85fa5f4fa9 Merge branch '2.9dev' of github.com:drwetter/testssl.sh into 2.9dev Dirk 2017-12-25 14:17:06 +01:00
  • 8fbbb211b9 Fix error where a ECDHE-GCM cipher was labeled low Dirk 2017-12-25 14:15:17 +01:00
  • 581b7cf579 run_crime() and OpenSSL 1.1.1 David Cooper 2017-12-21 11:22:08 -05:00
  • 978478fd0c Fix "typo" Dirk 2017-12-21 15:06:08 +01:00
  • 410c3d5f82 Merge pull request #944 from dcooper16/run_renego_ossl111 Dirk Wetter 2017-12-21 09:45:05 +01:00
  • b9e67fcf29 run_renego() and OpenSSL 1.1.1 David Cooper 2017-12-20 16:38:10 -05:00
  • 5c005ac139 Add '--full' / '-9' ... Dirk 2017-12-20 19:21:33 +01:00
  • 6d53a1e9f4 Merge pull request #942 from dcooper16/status_request Dirk Wetter 2017-12-20 18:52:40 +01:00
  • d919629f51 Merge pull request #943 from dcooper16/supported_groups Dirk Wetter 2017-12-20 18:52:02 +01:00
  • 14908bac98 Process supported_groups extension David Cooper 2017-12-20 10:40:17 -05:00
  • 65e435eb70 Process TLSv1.3 status_request extension David Cooper 2017-12-20 10:17:21 -05:00
  • f53d601325 Merge pull request #940 from dcooper16/tls13_decrypt_response Dirk Wetter 2017-12-20 09:03:36 +01:00
  • 5580aaae1b Merge branch '2.9dev' of github.com:drwetter/testssl.sh into 2.9dev Dirk 2017-12-20 09:01:09 +01:00
  • 1488baeac5 Documentation of CA_BUNDLES_PATH Dirk 2017-12-20 09:00:00 +01:00
  • e8be1f441b Decrypt server's TLSv1.3 response David Cooper 2017-12-15 16:40:47 -05:00
  • 33f8a04066 Merge pull request #938 from dcooper16/tls13_derive_session_key Dirk Wetter 2017-12-15 13:02:18 +01:00
  • cfecc3c8c4 Derive handshake traffic key for TLSv1.3 David Cooper 2017-12-14 10:18:24 -05:00
  • 1984d7fc90 html version of man page added Dirk 2017-12-14 10:25:59 +01:00
  • c23f47858d Overwrite as a default empty files Dirk 2017-12-14 10:06:19 +01:00
  • 4339c27659 Merge pull request #937 from dcooper16/fix_certificate_check Dirk Wetter 2017-12-13 20:34:19 +01:00
  • d8839b375b Fix check for whether certificates were found David Cooper 2017-12-13 11:18:33 -05:00
  • 3e73a553f0 Merge pull request #936 from dcooper16/no_pkey Dirk Wetter 2017-12-13 17:19:42 +01:00
  • cea570836f Check for pkey support David Cooper 2017-12-13 11:01:58 -05:00
  • 69956016b3 CVEs from https://robotattack.org/ added (in JSON) Dirk 2017-12-13 13:21:17 +01:00
  • fe7feda228 Merge pull request #932 from dcooper16/reduce_file_ops Dirk Wetter 2017-12-12 19:41:39 +01:00
  • 5978d37c74 Merge branch '2.9dev' of github.com:drwetter/testssl.sh into 2.9dev Dirk 2017-12-12 19:41:07 +01:00
  • f829878a43 Introduce property global HAS_PKUTIL Dirk 2017-12-12 19:37:33 +01:00
  • 274d8a8b3a Reduce use of temporary files David Cooper 2017-12-12 11:51:15 -05:00
  • 97b7f9c923 Merge pull request #931 from dcooper16/correct_title Dirk Wetter 2017-12-12 16:41:09 +01:00
  • 4a209cceb4 Correct comment David Cooper 2017-12-12 10:25:44 -05:00
  • 8f597f7077 Merge pull request #930 from dcooper16/Bleichenbacher Dirk Wetter 2017-12-12 15:58:24 +01:00
  • 5de873f8bc Test for vulnerability to Bleichenbacher attack David Cooper 2017-12-12 09:31:06 -05:00
  • 7e62dc3192 Merge pull request #925 from seccubus/json_footer_breaks_json Dirk Wetter 2017-12-07 09:59:58 +01:00
  • 393e4fb920 JSON output fixed in --parallel too Frank Breedijk 2017-12-06 21:54:59 +01:00
  • 3eb402a3d5 JSOn output is broken by the JSON footer in combination with mass mode Frank Breedijk 2017-12-06 16:10:53 +01:00
  • 4d7aa5df8b Fix for POP3, robustness for STARTTLS Dirk 2017-12-06 12:48:55 +01:00
  • 2a0a0475ab Fix for POP3, Robustness for STARTTLS Dirk 2017-12-06 12:24:26 +01:00
  • 9e1ed1c9cf Add check for -oA in nma greppable output Dirk 2017-12-06 10:23:24 +01:00