mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-10-31 13:55:25 +01:00
200 lines
6.0 KiB
Perl
Executable File
200 lines
6.0 KiB
Perl
Executable File
#!/usr/bin/env perl
|
|
|
|
# Just a functional test, whether there are any problems on the client side
|
|
# Probably we could also inspect the JSON for any problems for
|
|
# "id" : "scanProblem"
|
|
# "finding" : "Scan interrupted"
|
|
|
|
# Catches:
|
|
# - This unit test takes very long
|
|
# - Hosts which match the regex patterns should be avoided
|
|
|
|
use strict;
|
|
use Test::More;
|
|
use Data::Dumper;
|
|
# use JSON;
|
|
# if we need JSON we need to comment this and the lines below in
|
|
|
|
my $tests = 0;
|
|
my $prg="./testssl.sh";
|
|
my $check2run_smtp="--protocols --standard --fs --server-preference --headers --vulnerable -q --ip=one --color 0";
|
|
my $check2run="-q --ip=one --color 0";
|
|
my $uri="";
|
|
my $socket_out="";
|
|
my $openssl_out="";
|
|
# Blacklists we use to trigger an error:
|
|
my $socket_regex_bl='(e|E)rror|\.\/testssl\.sh: line |(f|F)atal|(c|C)ommand not found';
|
|
my $openssl_regex_bl='(e|E)rror|(f|F)atal|\.\/testssl\.sh: line |Oops|s_client connect problem|(c|C)ommand not found';
|
|
|
|
# my $socket_json="";
|
|
# my $openssl_json="";
|
|
# $check2run_smtp="--jsonfile tmp.json $check2run_smtp";
|
|
# $check2run="--jsonfile tmp.json $check2run";
|
|
|
|
die "Unable to open $prg" unless -f $prg;
|
|
|
|
$uri="smtp-relay.gmail.com:587";
|
|
|
|
|
|
#1
|
|
# unlink "tmp.json";
|
|
# we will have client simulations later, so we don't need to run everything again:
|
|
printf "\n%s\n", "STARTTLS SMTP unit test via sockets --> $uri ...";
|
|
$socket_out = `./testssl.sh $check2run_smtp -t smtp $uri 2>&1`;
|
|
# $socket_json = json('tmp.json');
|
|
unlike($socket_out, qr/$socket_regex_bl/, "");
|
|
$tests++;
|
|
|
|
#2
|
|
# unlink "tmp.json";
|
|
printf "\n%s\n", "STARTTLS SMTP unit tests via OpenSSL --> $uri ...";
|
|
$openssl_out = `./testssl.sh --ssl-native $check2run_smtp -t smtp $uri 2>&1`;
|
|
# $openssl_json = json('tmp.json');
|
|
unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
$tests++;
|
|
|
|
$uri="pop.gmx.net:110";
|
|
|
|
#3
|
|
# unlink "tmp.json";
|
|
printf "\n%s\n", "STARTTLS POP3 unit tests via sockets --> $uri ...";
|
|
$socket_out = `./testssl.sh $check2run -t pop3 $uri 2>&1`;
|
|
# $socket_json = json('tmp.json');
|
|
unlike($socket_out, qr/$socket_regex_bl/, "");
|
|
$tests++;
|
|
|
|
#4
|
|
printf "\n%s\n", "STARTTLS POP3 unit tests via OpenSSL --> $uri ...";
|
|
$openssl_out = `./testssl.sh --ssl-native $check2run -t pop3 $uri 2>&1`;
|
|
# $openssl_json = json('tmp.json');
|
|
unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
$tests++;
|
|
|
|
$uri="imap.gmx.net:143";
|
|
|
|
#5
|
|
# unlink "tmp.json";
|
|
printf "\n%s\n", "STARTTLS IMAP unit tests via sockets --> $uri ...";
|
|
$socket_out = `./testssl.sh $check2run -t imap $uri 2>&1`;
|
|
# $socket_json = json('tmp.json');
|
|
unlike($socket_out, qr/$socket_regex_bl/, "");
|
|
$tests++;
|
|
|
|
#6
|
|
printf "\n%s\n", "STARTTLS IMAP unit tests via OpenSSL --> $uri ...";
|
|
$openssl_out = `./testssl.sh --ssl-native $check2run -t imap $uri 2>&1`;
|
|
# $openssl_json = json('tmp.json');
|
|
unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
$tests++;
|
|
|
|
$uri="mail.tigertech.net:4190";
|
|
|
|
#7
|
|
# unlink "tmp.json";
|
|
printf "\n%s\n", "STARTTLS MANAGE(SIEVE) unit tests via sockets --> $uri ...";
|
|
$socket_out = `./testssl.sh $check2run -t sieve $uri 2>&1`;
|
|
# $socket_json = json('tmp.json');
|
|
unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
$tests++;
|
|
|
|
$uri="jabber.org:5222";
|
|
|
|
#8
|
|
# unlink "tmp.json";
|
|
printf "\n%s\n", "STARTTLS XMPP unit tests via sockets --> $uri ...";
|
|
$socket_out = `./testssl.sh $check2run -t xmpp $uri 2>&1`;
|
|
# $socket_json = json('tmp.json');
|
|
unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
$tests++;
|
|
|
|
# commented out, bc of travis' limits
|
|
#
|
|
#printf "\n%s\n", "STARTTLS XMPP unit tests via OpenSSL --> $uri ...";
|
|
#$openssl_out = `./testssl.sh --ssl-native $check2run -t xmpp $uri 2>&1`;
|
|
# $openssl_json = json('tmp.json');
|
|
#unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
#$tests++;
|
|
|
|
# $uri="jabber.ccc.de:5269";
|
|
# printf "\n%s\n", "Quick STARTTLS XMPP S2S unit tests via sockets --> $uri ...";
|
|
# $openssl_out = `./testssl.sh --openssl=/usr/bin/openssl -p $check2run -t xmpp-server $uri 2>&1`;
|
|
# # $openssl_json = json('tmp.json');
|
|
# unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
# $tests++;
|
|
|
|
|
|
$uri="ldap.uni-rostock.de:21";
|
|
|
|
#9
|
|
# unlink "tmp.json";
|
|
printf "\n%s\n", "STARTTLS FTP unit tests via sockets --> $uri ...";
|
|
$socket_out = `./testssl.sh $check2run -t ftp $uri 2>&1`;
|
|
# $socket_json = json('tmp.json');
|
|
# OCSP stapling fails sometimes with: 'offered, error querying OCSP responder (ERROR: No Status found)'
|
|
$socket_out =~ s/ error querying OCSP responder .*\n//g;
|
|
unlike($socket_out, qr/$socket_regex_bl/, "");
|
|
$tests++;
|
|
|
|
# commented out, bc of travis' limits
|
|
#
|
|
# printf "\n%s\n", "STARTTLS FTP unit tests via OpenSSL --> $uri ...";
|
|
# $openssl_out = `./testssl.sh --ssl-native $check2run -t ftp $uri 2>&1`;
|
|
# $openssl_json = json('tmp.json');
|
|
# OCSP stapling fails sometimes with: 'offered, error querying OCSP responder (ERROR: No Status found)'
|
|
# $openssl_out =~ s/ error querying OCSP responder .*\n//g;
|
|
# unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
# $tests++;
|
|
|
|
|
|
# https://ldapwiki.com/wiki/Public%20LDAP%20Servers
|
|
$uri="db.debian.org:389";
|
|
|
|
#10
|
|
printf "\n%s\n", "STARTTLS LDAP unit tests via sockets --> $uri ...";
|
|
$socket_out = `./testssl.sh $check2run -t ldap $uri 2>&1`;
|
|
# $socket_json = json('tmp.json');
|
|
unlike($socket_out, qr/$socket_regex_bl/, "");
|
|
$tests++;
|
|
|
|
#11
|
|
printf "\n%s\n", "STARTTLS LDAP unit tests via OpenSSL --> $uri ...";
|
|
$openssl_out = `./testssl.sh --ssl-native $check2run -t ldap $uri 2>&1`;
|
|
# $openssl_json = json('tmp.json');
|
|
unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
$tests++;
|
|
|
|
|
|
# For NNTP there doesn't seem to be reliable host out there
|
|
#$uri="144.76.182.167:119";
|
|
|
|
#printf "\n%s\n", "STARTTLS NNTP unit tests via sockets --> $uri ...";
|
|
#$socket_out = `./testssl.sh $check2run -t nntp $uri 2>&1`;
|
|
#unlike($socket_out, qr/$socket_regex_bl/, "");
|
|
#$tests++;
|
|
|
|
# commented out, bc of travis' limits
|
|
#
|
|
#printf "\n%s\n", "STARTTLS NNTP unit tests via OpenSSL --> $uri ...";
|
|
#$openssl_out = `./testssl.sh --ssl-native $check2run -t nntp $uri 2>&1`;
|
|
# $openssl_json = json('tmp.json');
|
|
#unlike($openssl_out, qr/$openssl_regex_bl/, "");
|
|
#$tests++;
|
|
|
|
# IRC: missing
|
|
# LTMP, mysql, postgres
|
|
|
|
|
|
done_testing($tests);
|
|
# unlink "tmp.json";
|
|
|
|
sub json($) {
|
|
my $file = shift;
|
|
$file = `cat $file`;
|
|
unlink $file;
|
|
return from_json($file);
|
|
}
|
|
|
|
|
|
# vim:ts=5:sw=5:expandtab
|
|
|