e5a015b842
- workaround for issue #58, same in http_header - FIX: if a web site returned IMAP e.g. in HTML code it may have led to the assumption IMAP is the service ;-/
Dirk2015-02-13 16:01:46 +01:00
d15d5b0c6f
- FIX regression: CRIME check - FIX: port ended up sometimes as URL part - also if it runs http a line is displayed as confirmation that HTTP was detected
Dirk2015-02-12 13:40:53 +01:00
db99cc8c0c
- new build with proper banner string
Dirk2015-02-12 11:12:49 +01:00
f30d7568e7
- checking protoype of tls sockets but not called/working yet - small fixes $DEBUG
Dirk2015-02-04 09:48:34 +01:00
1b8d96f1d8
- NEW: certificate fingerprints + serial
Dirk2015-02-03 23:46:47 +01:00
d2b833b2fa
- TLS 1.0/1.1 is not green anymore, only TLS 1.2 is the real one! - no bold for 3DES and medium - nslookup for MSYS2 etc. having no hosts (and fixing error message if host doesn't exist)
Dirk2015-02-03 23:20:59 +01:00
188e7f9095
Merge branch 'master' of github.com:drwetter/testssl.sh
Dirk2015-01-30 16:27:27 +01:00
4f1ca24bd2
FIX: experiration threshold < 30 days
Dirk2015-01-30 16:26:55 +01:00
85bc14c946
- FIX: STARTTLS is the criteria for using bash sslv2 or not, not the service
Dirk2015-01-29 23:24:49 +01:00
16c804d4ca
FIX: BEAST (supports higher protocols only when CBC ciphers detected) - FIX: URL in app banner - cosmetic issue: display also if one cookie was issue the number 1
Dirk2015-01-29 23:20:58 +01:00
89012a7a42
* NEW: protocol check SSLv2 in bash sockets per default (HTTP) (fallback to openssl with SSL_NATIVE=1)
Dirk2015-01-29 10:46:16 +01:00
b2e8e0175a
@nvsofts for LibreSSL patch
Dirk2015-01-29 09:34:32 +01:00
5e864c28b4
* NEW: emphasize any numbers in http header output * internal renaming of color functions ( --> pr_*) * new color switches (tput) * $COLOR is treated as integer not string * for some issues color adjusted accordingly (red --> brown/yellow)
Dirk2015-01-29 09:33:35 +01:00
3abaad5eb1
Merge branch 'master' of github.com:drwetter/testssl.sh
Dirk2015-01-28 15:31:13 +01:00
d35e2f95b8
fix for wrong # of HttpOnly cookie
Dirk2015-01-23 15:09:35 +01:00
84caf9ffd1
fix for double line and double application banner
Dirk2015-01-23 12:17:27 +01:00
f3eb84c078
Merge branch 'master' of github.com:drwetter/testssl.sh
Dirk2015-01-23 12:02:12 +01:00
baadfd0492
BREACH is not labeled as experimental anymore as it works reliably - so is heartbleed - FIX: shopt is removed in rc4 as most of the bash shells segfault here (bug!) - not tested anymore for HTTP within starttls, instead displaying here a line
Dirk2015-01-23 12:01:32 +01:00
6c6511ddb2
- VERBOSE -eq 1 is now DEBUG -eq 2 (VERBOSE completely removed) - DEBUG has now four modes 1: just keep files 2: VERBOSE -eq 1 3: head hexdumps and other stuff, 4: full debugging - env and internal stuff $TEMPDIR
Dirk2015-01-21 12:53:00 +01:00
82764845f2
Merge branch 'master' of github.com:drwetter/testssl.sh
Dirk2015-01-20 22:10:22 +01:00
d5924eedc4
- BEAST finally works - handling of spaces in output - different ciphers - FIX: setopt also for RC4 (proper handling of ret value)
Dirk2015-01-20 21:59:21 +01:00
28330dc6fc
first prototype BEAST | FIX: maketempf in initialize_engine | FIX: exit statements in main w/ more meaning/shorter
Dirk2015-01-20 21:51:49 +01:00
5853202efd
fine tuning on banner
Dirk2015-01-15 20:29:46 +01:00
4c6f0d9a50
- FIX: grep -a if we hit binary content with http_header (also if otherwise specified) - NEW: can specify URL (used for header matters and breach) - FIX: better handling of >1 cookies
Dirk2015-01-14 12:23:53 +01:00
3d81a7b5ec
* NEW: cookie flags (experimental) [URL is missing] * FIX: 30x handling for http_header (hint for final URL if stalled) * FIX: proper display of app-banners if >1
Dirk2015-01-14 09:48:44 +01:00
44d8f67998
SNI is not anymore 2do (removed misleading comment)
Dirk2015-01-12 23:28:38 +01:00
84204a80a3
debugging more fine grained
Dirk2015-01-12 23:15:26 +01:00
eae1b2810f
- check for CN wrt SNI / no SNI - fix different responses for CACert
Dirk2014-12-23 09:59:03 +01:00
4aa674d138
- Negotiated cipher per proto - nr_ciphers of used openssl version in banner - spdy_pre check - -testversion_new --> -testversion
Dirk2014-12-21 23:22:50 +01:00
a570d907e9
- Cipher order check! (also for starttls) - includes a remark 4 default_cipher (limited sense as client will pick) - selfsigned certs: error! - number of local ciphers in check with allciphers
Dirk2014-12-21 00:47:23 +01:00
04b6795f94
Merge branch 'master' of github.com:drwetter/testssl.sh
Dirk2014-12-19 17:06:37 +01:00
21493fb788
- tempfile handling: every function leaves one, if DEBUG is set - FIX*2: OPENSSL_CONF/GOST_CONF
Dirk2014-12-19 17:02:26 +01:00
521a7160a9
- NEW: certificate info, details: - NEW: CN, SAN - NEW: OCSP URI - NEW: CRL distr point - NEW: Issuer - NEW: expiration - NEW: signature algo - renamed cmdline --simple_preference to --server_defaults - now we have a TEMPDIR where all files are written toA - function or handling/removing TMPFILE
Dirk2014-12-18 09:33:24 +01:00
b40c0b7178
- RELEASE: final 2.2 - change of cmd line order for STARTTLS - help more clear
Dirk2014-12-08 10:32:51 +01:00
b3efb3c4b0
- BUGFIX: potential stalling in HTTP Header query - BUGFIX: HTTP specific vuln. won't be checked if service is not http (we still check crime and also spdy => gmail has spdy for pop and imap) - Feature: service detection: HTTP, IMAP, POP, SMTP - alignment in rDNS output corrected - minor cleanup / improvements
Dirk2014-11-30 01:30:20 +01:00
27f06f8d50
- BUGFIX: BSD now has proper heartbleed and ccs injection detection - significant code improvement of hex-byte parser <-> socket sender - BUGFIX: BSD now doesn't put an extra \n if rfc map file is missing - bumped to 2.1rc3, hoping that'll be the last
Dirk2014-11-27 21:33:33 +01:00
c034cd8a95
- for colors: double square brackets (might save a fork to "[ or "test" - in terms of debugging cleaned up listciphers/std_cipherlists - in other terms too
Dirk2014-11-25 13:12:24 +01:00
19f936bece
Fixed the problem when COLOR=0 caused 'printf' to break due to leading dashes interpreted as command line options.
Yuri2014-11-22 12:15:47 -08:00
Dirk
Marc Schütz
NV
The Gitter Badger
Lars Windolf
Dirk
Yuri
Peter Mosmans