mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-01-03 23:39:45 +01:00
35 lines
2.2 KiB
Markdown
35 lines
2.2 KiB
Markdown
|
|
## Intro
|
|
|
|
[](https://gitter.im/drwetter/testssl.sh?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
|
|
|
|
`testssl.sh` is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. It's designed to provide clear output for your "is this good or bad" decision.
|
|
|
|
It is working on every Linux distribution out of the box with some limitations of disabled features from the openssl client -- some workarounds are done with bash socket based checks. It also works on BSD and other Unices out of the box, supposed they have `/bin/bash` and standard tools like sed and awk installed. MacOS X and Windows (using MSYS2) work too.
|
|
|
|
On github you will find in the master branch the development version of the software -- with new features and maybe some bugs. For the stable version and a more thorough description of the software please see [testssl.sh](https://testssl.sh/ "Go to the site with the stable version and more documentation").
|
|
|
|
New features in the upcoming stable release 2.4 are:
|
|
|
|
* "only one cmd line option at a time": completely gone
|
|
* several tuning parameters on the cmd line (only available through environment variables b4): --assuming-http, --ssl-native, --sneaky, --warnings, --color, -- debug, --long
|
|
* certificate information: done,
|
|
* more HTTP header infos (cookies+security headers): done.
|
|
* protocol check via bash sockets, SSLv2+v3: done
|
|
* maybe: cipher check via bash sockets: for now only with development option -q
|
|
* debug file handling: done so far
|
|
* BEAST: done, maybe needs long output as option
|
|
* FREAK: done
|
|
* Secure Client-Initiated Renegotiation: done
|
|
* cosmetic code cleanusp
|
|
* bugfixing
|
|
|
|
Bottom line: Expect no further big features now. Plan is to stabilize, bug fix and publish a 2.4 release before the next bigger development stage.
|
|
|
|
|
|
Contributions, feedback, also bug reports are welcome. For contributions please note: One patch per feature -- bug fix/improvement. Please file bug reports @ https://github.com/drwetter/testssl.sh/issues .
|
|
|
|
Update notification here or @ [twitter](https://twitter.com/drwetter).
|
|
|
|
|