This website requires JavaScript.
c62177044b
- FIX #336
Dirk
2016-04-20 18:53:04 +02:00
fe098d4b39
Use $HAS_SSL2
David Cooper
2016-04-19 09:47:52 -04:00
7e506e5c5a
More extensions in socksend_tls_clienthello()
David Cooper
2016-04-13 15:39:12 -04:00
c6db49066f
run_allciphers(),run_cipher_per_proto(), and SSLv2
David Cooper
2016-04-11 15:51:53 -04:00
199708f94c
Merge pull request #335 from dcooper16/run_cipher_per_proto_speedup
Dirk Wetter
2016-04-08 22:11:59 +02:00
e7c27a6dbe
Merge pull request #338 from dcooper16/neat_list_bugfix
Dirk Wetter
2016-04-08 21:57:47 +02:00
bbb8af804e
Fix typo in neat_list()
David Cooper
2016-04-08 14:49:44 -04:00
52bd89921b
Update Readme.md
Dirk Wetter
2016-04-04 21:52:57 +02:00
bbcc869dec
run_cipher_per_proto speedup
David Cooper
2016-03-31 09:38:20 -04:00
16927f523f
- NOT OK ==> NOT ok - FIX #332 (--show-each w/o --wide) - polishing PR #329
Dirk
2016-03-30 23:28:31 +02:00
1ea6e944f3
- new chacha/poly ciphers
Dirk
2016-03-29 21:56:54 +02:00
bed1a602f1
- small hint for new chacha/poly ciphers
Dirk
2016-03-29 21:56:31 +02:00
62f34cfda2
Merge branch 'master' of github.com:drwetter/testssl.sh
Dirk
2016-03-29 19:47:26 +02:00
02f6e07709
- ipv6 changes (tested with 1.0.2h)
Dirk
2016-03-29 19:46:44 +02:00
c033ebd885
Merge pull request #330 from dcooper16/fix_mapping_RFC_typo
Dirk Wetter
2016-03-29 19:18:04 +02:00
02e41951cb
Fix typo in mapping-rfc.txt
David Cooper
2016-03-29 09:23:59 -04:00
c4d84451f1
Merge pull request #326 from dcooper16/run_allciphers_speedup
Dirk Wetter
2016-03-28 18:41:03 +02:00
eac2df6d81
run_allciphers() speedup
David Cooper
2016-03-25 10:00:50 -04:00
c684ba7d9c
- polishing
Dirk
2016-03-25 11:52:23 +01:00
ad8fd1804a
Merge pull request #325 from Niko78/patch-2
Dirk Wetter
2016-03-25 09:22:35 +01:00
e233480ca2
Update README.md
Niko78
2016-03-25 09:20:20 +01:00
a95c807c5e
Delete microsoft.pem
Dirk Wetter
2016-03-25 09:07:45 +01:00
7bb8ecc566
- now the stores are properly named
Dirk Wetter
2016-03-24 18:56:26 +01:00
53b0843664
- added Apple certificate store - renamed the other stores accordingly (caps in the beginng)
Dirk Wetter
2016-03-24 18:52:10 +01:00
dd30b8225e
- FIX #324 (thx, @dawsonpaul
Dirk
2016-03-21 23:03:42 +01:00
b5b158d5b2
- BREACH missed a LF
Dirk Wetter
2016-03-19 18:15:38 +01:00
ab7f66533c
- FIX #323 - add MicrosoftSharePointTeamServices in header detection
Dirk
2016-03-19 17:20:36 +01:00
a0b7d04974
Update README.md
Dirk Wetter
2016-03-14 22:40:29 +01:00
50660e9edd
typos, minor additions
Dirk Wetter
2016-03-13 21:13:03 +01:00
682ea066d6
typos, clarification
Dirk Wetter
2016-03-13 21:10:00 +01:00
7f28b17b3c
- updated, see #317
Dirk Wetter
2016-03-13 20:38:06 +01:00
46407ad2e4
- updated Mozilla truststore from http://curl.haxx.se/ instead of local firefox install, #317
Dirk Wetter
2016-03-12 18:19:15 +01:00
942359c8c1
- FIX #318 - minor code housekeeping - increased amount of buffer read for sockets, real fix follows. #313
Dirk Wetter
2016-03-12 17:08:43 +01:00
cf7fb4f773
Update Readme.md
Dirk Wetter
2016-03-11 16:42:20 +01:00
9753f0dbb7
Update Readme.md
Dirk Wetter
2016-03-11 16:41:46 +01:00
7cc41a1a92
logfile, jsonfile and csvfile parameters work without = (as documented in help)
Thomas Patzke
2016-03-08 22:25:00 +01:00
a72133419a
web frontend
Dirk Wetter
2016-03-08 18:12:34 +01:00
3ab9ec0230
Merge branch 'master' of github.com:drwetter/testssl.sh
Dirk
2016-03-08 10:39:13 +01:00
7b0fabdbc4
- making the read buffer for server hello bigger+variable
Dirk
2016-03-08 10:38:21 +01:00
0cae7a9a7d
Merge pull request #311 from noqqe/master
Dirk Wetter
2016-03-07 20:20:24 +01:00
1f3cd99ce8
Format readme for better readability
Florian Baumann
2016-03-07 13:04:30 +01:00
483139f0a4
- show censy link by default
Dirk
2016-03-05 21:35:30 +01:00
28a6199109
- several code housekeepings * SHOW_EACH_C has now the correct logic * pr_litemagenta ==> pr_warning * fileout WARN according to pr_warning then changed appropiately * some global vars in "" to avoid unneccessary shell expansion * HAS_SSL2/HAS_SSL3 now works more reliably * warning added in cipher order if ssl2/ssl3 is not supported by openssl
Dirk Wetter
2016-03-05 21:07:49 +01:00
118f897d6d
Merge pull request #308 from skunkwerks/master
Dirk Wetter
2016-03-04 00:33:25 +01:00
9e77f38318
fix certificate_info() test
Dave Cottlehuber
2016-03-03 21:47:36 +01:00
1ead2e65bc
- experimental label for DROWN
Dirk Wetter
2016-03-03 20:04:20 +01:00
6367693ccf
- first check for DROWN #305
Dirk Wetter
2016-03-03 19:50:44 +01:00
752e6cdf56
- one outstanding openssl CVE issue wrt SSLv2 - first skeleton for DROWN #305
Dirk Wetter
2016-03-03 11:56:25 +01:00
c4a68df423
Merge pull request #306 from thecky/severity
Dirk Wetter
2016-03-02 16:49:46 +01:00
38477b4383
renamed pr_brown to pr_svrty_medium
Thomas Martens
2016-03-01 20:42:34 +01:00
dbfa66e6c7
renamed pr_yellow to pr_svrty_minor
Thomas Martens
2016-03-01 20:41:03 +01:00
ff9f1632e4
renamed pr_green to pr_done_best
Thomas Martens
2016-03-01 20:39:30 +01:00
2686f8cdb4
renamed pr_litegreen to pr_done_good
Thomas Martens
2016-03-01 20:36:41 +01:00
207e4e5ce4
renamed pr_red to pr_svrty_critical
Thomas Martens
2016-03-01 20:31:26 +01:00
cad924e707
renamed pr_litered to pr_svrty_high
Thomas Martens
2016-03-01 20:25:41 +01:00
490da0069a
Merge branch 'master' of https://github.com/drwetter/testssl.sh into severity
Thomas Martens
2016-03-01 20:08:26 +01:00
61ecf051e4
Merge pull request #300 from Dude4Linux/uppercase-severity-codes
Dirk Wetter
2016-02-24 08:35:24 +01:00
f90f1a91e4
Merge branch 'master' of https://github.com/drwetter/testssl.sh into severity
Thomas Martens
2016-02-23 21:04:16 +01:00
87218b6b1a
Merge branch 'master' into uppercase-severity-codes
John Carver
2016-02-23 10:34:32 -06:00
53e76b0545
Update Readme.md
Dirk Wetter
2016-02-23 09:08:11 +01:00
20cee1e788
- fix: relative redirect led to fp (https)
Dirk
2016-02-22 10:44:43 +01:00
c70a13d014
- fix #296 (no recent regression as assumed)
Dirk
2016-02-20 21:46:17 +01:00
583584e095
- FIX #297 - FIX #243 - reformmated BEAST a bit (was screwed up in ! WIDE mode if too many ciphers
Dirk
2016-02-20 14:10:04 +01:00
71b4c03202
- fix key problem hpkp
Dirk
2016-02-20 11:07:47 +01:00
4be1539a4d
lowercase ok when used with NOT in (NOT ok)
John Carver
2016-02-18 11:49:47 -06:00
291edce0c3
uppercase server sets a cipher order (OK)
John Carver
2016-02-18 11:41:17 -06:00
6858026412
uppercase INFO when outputting status_code
John Carver
2016-02-18 11:15:31 -06:00
7846fc5fef
Merge pull request #294 from b1gb1t/jsonCorrection
Dirk Wetter
2016-02-16 12:32:05 +01:00
2ee021d337
Correction of line 3607: new line (\n) corrupted the json format
b1gb1t
2016-02-16 09:54:01 +01:00
baff869850
Merge branch 'master' of https://github.com/drwetter/testssl.sh into severity
Thomas Martens
2016-02-14 12:10:07 +01:00
61c1669687
Merge pull request #292 from dcooper16/multiple_certificates
Dirk Wetter
2016-02-14 00:08:52 +01:00
79445ebe5b
Merge pull request #293 from SietsevanderMolen/fix-json
Dirk Wetter
2016-02-12 15:11:45 +01:00
394f186000
also remove carriage returns, fix for csv
Sietse van der Molen
2016-02-12 12:40:31 +01:00
b2e4df60ca
fix json output
Sietse van der Molen
2016-02-12 11:05:36 +01:00
02239be295
Detect multiple certificates cleanup
David Cooper
2016-02-09 13:35:46 -05:00
8842aeb2b9
Fix #289 - the grep that decides whether a domain is a local address doesn't consider the case when the full domain name is in the hosts file, but followed by .some.other.stuff. This PR addresses this case.
AndreiD
2016-02-08 12:51:54 +01:00
70cd658447
- FIX #283 (regression from 1a8ed3d70a ) - minor output fixes for BEAST - >4096 bit RSA keys labled in litemangenta now as it could have compatibility probs - -V 0x.. or -V 0X.. gives at least a warning
Dirk Wetter
2016-02-07 19:13:59 +01:00
b8f2540541
Merge pull request #286 from tjconcept/master
Dirk Wetter
2016-02-07 08:49:20 +01:00
c48b27a9a9
fix typo in b93fc824
Thomas Jensen
2016-02-07 03:07:30 +01:00
b93fc82489
slightly better output for OCSP stapling
Dirk
2016-02-06 22:31:32 +01:00
c60a39282c
typo
Dirk Wetter
2016-02-06 16:18:46 +01:00
0f4eb221fb
additions, naming of sources
Dirk Wetter
2016-02-06 16:17:01 +01:00
1fe9c95dc0
checkin (for future work)
Dirk Wetter
2016-02-06 15:42:55 +01:00
5491333693
Merge pull request #285 from dcooper16/mapping-rfc
Dirk Wetter
2016-02-06 10:30:54 +01:00
77379903ed
Fix typo in etc/mapping-rfc.txt
David Cooper
2016-02-05 14:53:19 -05:00
39226e05d2
openssl 1.1.0
Dirk
2016-02-03 17:56:56 +01:00
a676742256
Remaining issues solved for OpenSSL 1.1.0 compliance, output corrections, CN/SNI improvements
Dirk
2016-02-03 17:55:53 +01:00
9cf3e21c3d
- swapped sig_algo and server key size - output improvements for unknown sig algos like GOST
Dirk
2016-02-03 09:55:47 +01:00
ea18d2f02c
- fix: discovering the CN for the default host (without SNI) - CN parsing of certificate improved - CN / subject can be also cyrillic now -- supposed the terminal supports the charset
Dirk
2016-02-03 00:05:57 +01:00
40d4cbb57f
Update Readme.md
Dirk Wetter
2016-02-01 22:42:49 +01:00
aff08b1ff2
Update CREDITS.md
Dirk Wetter
2016-02-01 22:41:36 +01:00
dd65050ee1
- "secret" env switch shows during -e/-E the signature algorithm (see also #276 ) - exp. date check corrected esp. for openssl 1.1.0 - warning relaxed for chain of trust
Dirk
2016-02-01 22:06:27 +01:00
b99c5ac30c
Merge branch 'master' of https://github.com/drwetter/testssl.sh
Thomas Martens
2016-02-01 21:09:31 +01:00
52f7de1a4a
Revert "fixed output in ciphertest with --color=1"
Thomas Martens
2016-02-01 21:03:22 +01:00
ff714a673f
Merge pull request #280 from dcooper16/number_of_cert_bundles
Dirk Wetter
2016-02-01 21:02:14 +01:00
9f998d8c53
Number of trusted certificate files in $INSTALL_DIR/etc/*.pem
dcooper16
2016-02-01 14:11:50 -05:00
f7853f36a0
- added SSL_CERT_FILE=/dev/null - output cleanups in determine_trust()
Dirk Wetter
2016-02-01 17:33:59 +01:00
386234f794
Merge pull request #279 from dcooper16/chain_of_trust_fix
Dirk Wetter
2016-02-01 17:23:03 +01:00
abffd1b81e
Fix chain of trust problem
dcooper16
2016-02-01 11:17:13 -05:00
2f4e549dab
- missing root certs
Dirk Wetter
2016-02-01 16:27:20 +01:00