testssl.sh
testssl.sh copied to clipboard
drwetter
Testing TLS/SSL encryption anywhere on any port
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3.1.0 to 3.1.1. Release notes Sourced from docker/build-push-action's releases. v3.1.1 Fix GitHub token not passed with Git context if subdir defined by @crazy-max (#663) Replace deprecated fs.rmdir...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
This PR fixes #2198 by ensuring that a comma is added before "service" finding if $FIRST_FINDING is false.
This PR fixes the way that ciphers are graded by only calling `set_ciph_str_score()` from `neat_list()` if the cipher suite is supported (i.e., if $how2show is true).
As suggested in #1844, this PR changes testssl.sh so that the parent process quits immediately if there is an error in the command line for one of the child processes....
**Which version are you referring to** 3.0.x and 3.1dev We would need contributions for * Safari @ iOS * windows 10 and 11 with the lastest edge version * Java...
**Command line / docker command to reproduce** testssl.sh --wide --warnings off --ssl-native --jsonfile-pretty /tmp/.testssl_1655985934984.json omitted.com **Expected behavior** A valid JSON result in the specified file **Your system (please complete the...
Currently, testssl prints a big red warning when a server has no server preferred cipher order. Mozilla recently relaxed their recommendations regarding cipher order. If only strong cipher suites are...
**Please check this repo whether this is a known feature request** no **Which version are you referring to** 3.3dev? **Describe your feature request (if it's a technical feature)** Hanno provides...
Patch to test IPv6 by default if the target host has AAAA records available via DNS. IPv4 will still be tested by default if the target host has A records...
This PR adds an implementation of MTA-STS (RFC 8461), see also issue #1073 Currently it's a WIP. What doesn't work - test a hostname which is not equal to domainname...