4c3cc0df8e
- increase first read buffer -- otherwise it's how up at hb reply and lead to false positives
Dirk2014-11-20 18:55:51 +01:00
d4265742b1
color codes for protocols and default ciphers reflect better a rating - fix: heartbleed function needed a $TMPFILE for determining the TLS protocol - version bumped to 2.1rc2
Dirk2014-11-20 10:46:55 +01:00
5dd4a8f3fa
- fix in cleanup (while debug) - wrong cmd line option --> help instread of error
Dirk2014-11-19 22:23:13 +01:00
05877dca93
- protocol check stream lined: similar now for every protocol - NPN/SPDY is not green anymore
Dirk2014-11-19 18:04:43 +01:00
d77b667489
- protocol w/o cipher (only SSLv2 so far) - for EVERY protocol now check whether $openssl supports it - better fail for PFS if there are no local ciphers
Dirk2014-11-19 17:08:59 +01:00
99e472ac01
- banner (opensssl version build date, platform) slightly changed - even clearer warning upon old openssl version (MacOSX!) - oparoz hexdump patch - heartbleed doenst do a precheck anymore --> just sockets as it may lead to false negatives if the client was complied with it disabled (FreeBSD)
Dirk2014-11-19 13:22:22 +01:00
7b45311c30
- stripping of leading 0 in testssl.sh needed to be reflected by this file
Dirk2014-11-18 11:04:57 +01:00
049a945abc
- prettyprint_local now also can do word pattern matching - help improved - put the stripping of leading 0 into normalize_cipher_code where it belonged - the latter makes a modified mapping-rfc.txt necessary!
Dirk2014-11-18 11:03:03 +01:00
f45d85617b
- hexcode in neat list now w/o leading 0 - help cleaned up and clearer (& removing tabs) - test_just_one with headline
Dirk2014-11-18 10:29:11 +01:00
de0b4313b8
Make sure that cleanup() function is always called
Peter Mosmans2014-11-18 14:30:48 +11:00
15f23f1fec
Added compatilibility with MSYS2 on Windows
Peter Mosmans2014-11-18 13:30:56 +11:00
cf8fa2c3f3
- version bumped to 2.1rc1, better layout for chacha (albeit bit ugly), better layout for all ciphers, test_just_one w/ headline
Dirk2014-11-18 01:36:29 +01:00
16279267ea
- sockread w/ sleep - ccs better documented + more verbose during debug
Dirk2014-11-18 00:26:58 +01:00
fc4c2e5446
- omit the "**" in non colored mode - query COLOR properly (env)
Dirk2014-11-17 17:43:59 +01:00
a7bbc6c39a
warning upon "no ssl enabled server" clearer; we check only for return code of s_client. Fails if certificate needed
Dirk2014-11-17 17:05:43 +01:00
b49b1451c4
FIX: for FreeBSD and spaces in "Local problem ..."
Dirk2014-10-29 20:23:21 +01:00
ef5bf00094
FIXED: too much spaces in "Local problem: No .. configured"
Dirk2014-10-23 15:52:06 +02:00
6737cd230c
FIXED: When there is no support in openssl for SSLv2 the error message and the next protocol test get on the same line
Dirk2014-10-23 15:40:15 +02:00
abef156191
Merge branch 'master' of github.com:drwetter/testssl.sh
Dirk2014-10-17 22:17:04 +02:00
1720fed5fe
be clear that no TLS_FALLBACK_SCSV support yet
Dirk2014-10-17 22:16:37 +02:00
df06f45432
- mm: patch for libressl
Dirk2014-10-14 16:08:11 +02:00
905e1540ab
another error message suppressed (DNS) and properly handled internally
Dirk2014-10-09 11:22:23 +02:00
08202a5768
- FIX: socket reset (ccs, hb) made formatting look not ok
Dirk2014-10-08 14:30:31 +02:00
397b115a47
BUGFIX: socket buffer wasn't empty, could have led to false negatives
Dirk2014-10-08 13:07:12 +02:00
4ae510650d
- for seldom cases of two hsts header we don't throw an error but take the first one
Dirk2014-10-08 01:03:14 +02:00
e06251a1d3
- removed netcat dependency, availability check with bash sockets only. Should work on RH'ish distros better now
Dirk2014-10-07 12:04:21 +02:00
7162d9448f
- for clarification hint to license file
Dirk2014-10-07 11:15:05 +02:00
723ab08258
- BUGFIX: supplying ip addresses only works again
Dirk2014-10-07 11:14:39 +02:00
e117fd9612
ALPHA version of cert checker. TO BE INTGRATED INTO testssl.sh
Dirk Wetter2014-09-25 16:54:47 +02:00
93503a1b43
- except minor points now compatible to MacOSX and *BSD - Russian GOST cipher support added - more see CHANGELOG.txt
Dirk Wetter2014-07-16 19:04:15 +02:00
efcc03928d
- new binaries with: - chaha20+ploy1305, thx to Peter Mosmans - openssl starttls krb-telnet support (thx to Stefan Zehl) - openssl starttls xmpp starttls/sni patch (thx to Stefan Zehl) - record breaking 167 ciphers (including kerberos)
Dirk Wetter2014-07-04 11:59:01 +02:00