testssl.sh/t
Dirk a499233df2 Add unittest for diffrent openssl versions
This adds a unit test to compare a run against google with the supplied openssl
version vs /usr/bin/openssl .

This would fix #2626.

It looks like there are still points to clarify
* NPN output is different (bug)
* Newer openssl version claims it's ECDH 253 instead of ECDH 256.
* Newer openssl version claims for 130x cipher it's ECDH 253, via sockets it´s ECDH/MLKEM. This seems a bug (@dcooper)

A todo is also restricing the unit test to the one where openssl is being used. E.g. the ROBOT check and more aren't done with openssl. So there's no value checking this here.
2025-01-22 18:12:53 +01:00
..
baseline_data updated default_testssl.csvfile with new RSA-PSS 2023-03-23 00:14:15 +01:00
00_testssl_help.t see previous commit 2024-10-14 17:11:55 +02:00
01_testssl_banner.t Fix spelling 2021-09-04 12:39:03 +00:00
02_clientsim_txt_parsable.t Fix spelling 2021-09-04 12:39:03 +00:00
05_ca_hashes_up_to_date.t see previous commit 2024-10-14 17:11:55 +02:00
10_baseline_ipv4_http.t Fix spelling 2021-09-04 12:39:03 +00:00
11_baseline_ipv6_http.t.DISABLED Trim excess whitespace 2021-09-04 13:28:30 +00:00
12_diff_opensslversions.t Add unittest for diffrent openssl versions 2025-01-22 18:12:53 +01:00
21_baseline_starttls.t Remove NNTP from CI tests 2023-01-31 09:34:18 +01:00
23_client_simulation.t Add missing vim modeline config in sh & perl files, cc #1901 2021-06-01 14:40:24 +08:00
31_isJSON_valid.t Add missing vim modeline config in sh & perl files, cc #1901 2021-06-01 14:40:24 +08:00
32_isHTML_valid.t see previous commit 2024-10-14 17:11:55 +02:00
33_isJSON_severitylevel_valid.t Add missing vim modeline config in sh & perl files, cc #1901 2021-06-01 14:40:24 +08:00
51_badssl.com.t see previous commit 2024-10-14 17:15:43 +02:00
59_hpkp.t.tmpDISABLED Add missing vim modeline config in sh & perl files, cc #1901 2021-06-01 14:40:24 +08:00
61_diff_testsslsh.t Fix Actions 2022-05-30 13:37:07 +02:00
Readme.md Add "command not found" 2020-11-26 13:41:44 +01:00

Naming scheme

  • 00-05: Does the bare testssl.sh work at all?
  • 10-29: Do scans work fine (client side)?
  • 30-39: Does reporting work?
  • 50-69: Are the results what I expect (server side)?

Please help to write Travis/CI tests! Documentation can be found here. You can consult the existing code here. Feel free to use 10_baseline_ipv4_http.t or 23_client_simulation.t as a template.