mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-01-30 20:31:15 +01:00
69 lines
1.7 KiB
Perl
Executable File
69 lines
1.7 KiB
Perl
Executable File
#!/usr/bin/env perl
|
|
|
|
# Baseline diff test against testssl.sh (csv output)
|
|
#
|
|
# We don't use a full run yet and only the certificate section.
|
|
# There we would need to blacklist more, like:
|
|
# cert_serialNumber, cert_fingerprintSHA1, cert_fingerprintSHA256, cert
|
|
# cert_expirationStatus, cert_notBefore, cert_notAfter, cert_caIssuers, intermediate_cert
|
|
#
|
|
|
|
use strict;
|
|
use Test::More;
|
|
use Data::Dumper;
|
|
use Text::Diff;
|
|
|
|
my $tests = 0;
|
|
my $prg="./testssl.sh";
|
|
my $baseline_csv="./t/baseline_data/testssl.csv";
|
|
my $cat_csv="tmp.csv";
|
|
my $check2run="-p -s -P --fs -h -U -c -q --ip=one --color 0 --csvfile $cat_csv";
|
|
my $uri="testssl.sh";
|
|
my $diff="";
|
|
my @args="";
|
|
|
|
die "Unable to open $prg" unless -f $prg;
|
|
die "Unable to open $baseline_csv" unless -f $baseline_csv;
|
|
|
|
# Provide proper start conditions
|
|
unlink $cat_csv;
|
|
|
|
|
|
#1 run
|
|
printf "\n%s\n", "Diff unit test (IPv4) against \"$uri\"";
|
|
@args="$prg $check2run $uri >/dev/null";
|
|
system("@args") == 0
|
|
or die ("FAILED: \"@args\" ");
|
|
|
|
$cat_csv=`cat $cat_csv`;
|
|
$baseline_csv=`cat $baseline_csv`;
|
|
|
|
# Filter for changes that are allowed to occur
|
|
$cat_csv =~ s/HTTP_clock_skew.*\n//g;
|
|
$baseline_csv =~ s/HTTP_clock_skew.*\n//g;
|
|
|
|
# HTTP time
|
|
$cat_csv =~ s/HTTP_headerTime.*\n//g;
|
|
$baseline_csv =~ s/HTTP_headerTime.*\n//g;
|
|
|
|
# DROWN
|
|
$cat_csv =~ s/censys.io.*\n//g;
|
|
$baseline_csv =~ s/censys.io.*\n//g;
|
|
|
|
$diff = diff \$cat_csv, \$baseline_csv;
|
|
|
|
# Compare the differences to the baseline file -- and print differences if there were detected.
|
|
#
|
|
ok($cat_csv eq $baseline_csv, "Check whether CSV output matches baseline file from $uri") or
|
|
diag ("\n%s\n", "$diff");
|
|
|
|
unlink "tmp.csv";
|
|
|
|
$tests++;
|
|
done_testing($tests);
|
|
printf "\n";
|
|
|
|
|
|
# vim:ts=5:sw=5:expandtab
|
|
|