Adding upstream version 3.2~rc3+dfsg.upstream/3.2_rc3+dfsgupstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 531 insertions, 0 deletions

diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..c20aa5c
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,531 @@
+
+## Change Log
+
+### Features implemented / improvements in 3.2
+
+* Rating (SSL Labs, not complete)
+* Extend Server (cipher) preference: always now in wide mode instead of running all ciphers in the end (per default)
+* Remove "negotiated cipher / protocol"
+* Provide a better verdict wrt to server order: Now per protocol and ciphers are weighted for each protocol
+* Switched to multi-stage docker image with opensuse base to avoid musl libc issues, performance gain also
+* Improved compatibility with OpenSSL 3.0
+* Improved compatibility with Open/LibreSSL versions not supporting TLS 1.0-1.1 anymore
+* Renamed PFS/perfect forward secrecy --> FS/forward secrecy
+* Cipher list straightening
+* Improved mass testing
+* Better align colors of ciphers with standard cipherlists
+* Save a few cycles for ROBOT
+* Several ciphers more colorized
+* Percent output char problem fixed
+* Several display/output fixes
+* BREACH check: list all compression methods and add brotli
+* Test for old winshock vulnerability
+* Test for STARTTLS injection vulnerabilities (SMTP, POP3, IMAP)
+* STARTTLS: XMPP server support, plus new set of OpenSSL-bad binaries
+* Several code improvements to STARTTLS, also better detection when no STARTTLS is offered
+* STARTTLS on active directory service support
+* Security fixes: DNS and other input from servers
+* Don't penalize missing trust in rating when CA not in Java store
+* Added support for certificates with EdDSA signatures and public keys
+* Extract CA list shows supported certification authorities sent by the server
+* TLS 1.2 and TLS 1.3 sig algs added
+* Check for ffdhe groups
+* Show server supported signature algorithms
+* --add-ca can also now be a directory with \*.pem files
+* Warning of 398 day limit for certificates issued after 2020/9/1
+* Added environment variable for amount of attempts for ssl renegotiation check
+* Added --user-agent argument to support using a custom User Agent
+* Added --overwrite argument to support overwriting output files without warning
+* Headerflag X-XSS-Protection is now labeled as INFO
+* Strict parser for HSTS
+* DNS via proxy improvements
+* Client simulation runs in wide mode which is even better readable
+* Added --reqheader to support custom headers in HTTP requests
+* Test for support for RFC 8879 certificate compression
+* Deprecating --fast and --ssl-native (warning but still av)
+* Compatible to GNU grep 3.8
+* Don't use external pwd command anymore
+* Doesn't hang anymore when there's no local resolver
+
+
+### Features implemented / improvements in 3.0
+
+* Full support of TLS 1.3, shows also drafts supported
+* Extended protocol downgrade checks
+* ROBOT check
+* Better TLS extension support
+* Better OpenSSL 1.1.1 and higher versions support as well as LibreSSL >3
+* More robustness for OpenBSD
+* DNS over Proxy and other proxy improvements
+* Decoding of unencrypted BIG IP cookies
+* Initial client certificate support
+* Warning of 825 day limit for certificates issued after 2018/3/1
+* Socket timeouts (``--connect-timeout``)
+* IDN/IDN2 servername/URI + emoji support, supposed libidn/idn2 is installed and DNS resolver is recent) support
+* Initial support for certificate compression
+* Better JSON output: renamed IDs and findings shorter/better parsable, also includes certificate
+* JSON output now valid also for non-responding servers
+* Testing now per default 370 ciphers
+* Further improving the robustness of TLS sockets (sending and parsing)
+* Support of supplying timeout value for `openssl connect` -- useful for batch/mass scanning
+* File input for serial or parallel mass testing can be also in nmap grep(p)able (-oG) format
+* LOGJAM: now checking also for DH  and FFDHE groups (TLS 1.2)
+* PFS: Display of elliptical curves supported, DH and FFDHE groups (TLS 1.2 + TLS 1.3)
+* Check for session resumption (Ticket, ID)
+* TLS Robustness check GREASE and more
+* Server preference distinguishes between TLS 1.3 and lower protocols
+* Mark TLS 1.0 and TLS 1.1 as deprecated
+* Does a few startup checks which make later tests easier and faster (``determine_optimal_\*()``)
+* Expect-CT Header Detection
+* `--phone-out` does certificate revocation checks via OCSP (LDAP+HTTP) and with CRL
+* `--phone-out` checks whether the private key has been compromised via https://pwnedkeys.com/
+* Missing SAN warning
+* Added support for private CAs
+* Way better handling of connectivity problems (counting those, if threshold exceeded -> bye)
+* Fixed TCP fragmentation
+* Added `--ids-friendly` switch
+* Exit codes better: 0 for running without error, 1+n for small errors, >240 for major errors.
+* Better error msg suppression (not fully installed OpenSSL)
+* Better parsing of HTTP headers & better output of longer HTTP headers
+* Display more HTTP security headers
+* HTTP Basic Auth support for HTTP header
+* experimental "eTLS" detection
+* Dockerfile and repo @ docker hub with that file (see above)
+* Java Root CA store added
+* Better support for XMPP via STARTTLS & faster
+* Certificate check for to-name in stream of XMPP
+* Support for NNTP and LMTP via STARTTLS, fixes for MySQL and PostgresQL
+* Support for SNI and STARTTLS
+* More robustness for any STARTTLS protocol (fall back to plaintext while in TLS caused problems)
+* Renegotiation checks improved, also no false positive for Node.js anymore
+* Major update of client simulations with self-collected up-to-date data
+* Update of CA certificate stores
+* Lots of bug fixes
+* More travis/CI checks -- still place for improvements
+* Man page reviewed
+
+### Features implemented / improvements in 2.9.5
+
+* Way better coverage of ciphers as most checks are done via bash sockets where ever possible
+* Further tests via TLS sockets and improvements (handshake parsing, completeness, robustness)
+* Testing 359 default ciphers (``testssl.sh -e/-E``) with a mixture of sockets and openssl. Same speed as with openssl only but additional ciphers such as post-quantum ciphers, new CHAHA20/POLY1305, CamelliaGCM etc.
+* TLS 1.2 protocol check via sockets in production
+* Finding more TLS extensions via sockets
+* TLS Supported Groups Registry (RFC 7919), key shares extension
+* Non-flat JSON output support
+* File output (CSV, JSON flat, JSON non-flat) supports a minimum severity level (only above supplied level there will be output)
+* Native HTML support instead going through 'aha'
+* LUCKY13 and SWEET32 checks
+* Ticketbleed check
+* LOGJAM: now checking also for known DH parameters
+* Support of supplying timeout value for ``openssl connect`` -- useful for batch/mass scanning
+* Parallel mass testing
+* Check for CAA RR
+* Check for OCSP must staple
+* Check for Certificate Transparency
+* Check for session resumption (Ticket, ID)
+* Better formatting of output (indentation)
+* Choice showing the RFC naming scheme only
+* File input for mass testing can be also in nmap grep(p)able (-oG) format
+* Postgres und MySQL STARTTLS support
+* Man page
+
+### New in 2.8
+
+* Trust chain check against certificate stores from Apple (OS), Linux (OS),
+  Microsoft (OS), Mozilla (Firefox Browser), works for openssl >=1.0.1
+* IPv6 (status: 80% working, details see
+  https://github.com/drwetter/testssl.sh/issues/11
+* works now on servers requiring a x509 certificate for authentication
+* extensive CN <--> hostname check
+* SSL Session ID check
+* Avahi/mDNS based name resolution
+* HTTP2/ALPN protocol check
+* Logging to a file / dir
+* Logging to (flat) JSON + CSV
+* HPKP checks now also for Root, intermediate SPKIs
+* Check for multiple server certificates
+* Browser cipher simulation: what client will connect with which cipher + protocol
+* GOST cipher+certificate improvements
+* Assistance for color-blind users
+* Even more compatibility improvements for FreeBSD, NetBSD, Gentoo, RH-ish, F5 and Cisco systems
+* Considerable speed improvements for each cipher runs (-e/-E)
+* More robust SSLv2 + TLS socket interface
+* separate check for curves
+* OpenSSL 1.1.0 compliant
+* check for DROWN
+* Whole number of bugs squashed
+
+### New in 2.6
+
+  * Display matching host key (HPKP)
+  * LOGJAM 1: check DHE_EXPORT cipher
+  * LOGJAM 2: displays DH(/ECDH) bits in wide mode on negotiated ciphers
+  * "wide mode" option for checks like RC4, BEAST. PFS. Displays hexcode, kx, strength, DH bits, RFC name
+  * binary directory provides out of the box better binaries (Linux 32+64 Bit, Darwin 64 bit, FreeBSD 64 bit)
+  * OS X binaries (@jvehent, new builds: @jpluimers)
+  * ARM binary (@f-s)
+  * FreeBSD binary
+  * TLS_FALLBACK_SCSV check -- thx @JonnyHightower
+  * (HTTP) proxy support! Also with sockets -- thx @jnewbigin
+  * Extended validation certificate detection
+  * Run in default mode through all ciphers at the end of a default run
+  * will test multiple IP addresses of one supplied server name in one shot, --ip= restricts it accordingly
+  * new mass testing file option --file option where testssl.sh commands are being read from, see https://twitter.com/drwetter/status/627619848344989696
+  * TLS time and HTTP time stamps
+  * TLS time displayed also for STARTTLS protocols
+  * support of sockets for STARTTLS protocols
+  * TLS 1.0-1.1 as socket checks per default in production
+  * further detection of security relevant headers (reverse proxy, IPv4 addresses), proprietary banners (OWA, Liferay etc.)
+  * can scan STARTTLS+XMPP by also supplying the XMPP domain (to-option in XML streams).
+  * quite some LibreSSL fixes, still not recommended to use though (see https://testssl.sh/)
+  * lots of fixes, code improvements, even more robust
+
+Full log @ https://github.com/drwetter/testssl.sh/commits/2.6/testssl.sh
+
+### New in 2.4
+  * "only one cmd line option at a time" is completely gone
+  * several tuning parameters on the cmd line (only available through environment variables b4): --assuming-http, --ssl-native, --sneaky, --warnings, --color, -- debug, --long
+  * certificate information
+  * more HTTP header infos (cookies+security headers)
+  * protocol check via bash sockets for SSLv2+v3
+  * debug handling significantly improved (verbosity/each function leaves files in $TEMPDIR)
+  * BEAST check
+  * FREAK check
+  * check for Secure Client-Initiated Renegotiation
+  * lots of cosmetic and maintainability code cleanups
+  * bugfixing
+
+Full changelog: https://github.com/drwetter/testssl.sh/commits/2.4/testssl.sh
+
+### 2.2. new features:
+  * Works fully under FreeBSD (openssl >=1.0)
+  * single cipher check (-x) with pattern of hexcode/cipher
+  * check for POODLE SSL
+  * HPKP check
+  * OCSP stapling
+  * GOST and CHACHA20 POLY1305 cipher support
+  * service detection (HTTP, IMAP, POP, SMTP)
+  * runs now with all colors, b/w screen, no escape codes at all
+  * protocol check better
+  * job control removes stalling
+  * RFC <---> OpenSSL name space mapping of ciphers everywhere
+  * includes a lot of fixes
+
+Full changelog @  https://github.com/drwetter/testssl.sh/commits/2.2/testssl.sh
+
+### 2.0 major release, new features:
+  * SNI
+  * STARTTLS fully supported
+  * RC4 check
+  * (P)FS check
+  * SPDY check
+  * color codes make more sense now
+  * cipher hexcodes are shown
+  * tests ciphers per protocol
+  * HSTS
+  * web and application server banner
+  * server preferences
+  * TLS server extensions
+  * server key size
+  * cipher suite mapping from openssl to RFC
+  * heartbleed check
+  * CCS injection check
+
+### Historical releases
+
+1.112
+- IPv6 display fix
+
+1.111
+- NEW: tested under FreeBSD (works with exception of xxd in CCS)
+- getent now works under Linux and FreeBSD
+- sed -i in hsts sacrificed for compatibility
+- removed query for IP for finishing banner, is now called once in parse_hn_port
+- GOST warning after banner
+- empty build date is not displayed anymore
+- long build date strings minimized
+- FIXED: IPv6 address are displayed again
+
+1.110
+- NEW: adding Russian GOST cipher support by providing a config file on the fly
+- adding the compile date of openssl in the banner
+
+1.109
+- minor IPv6 fixes
+
+1.108
+- NEW: Major rewrite of output functions. Now using printf instead of "echo -e" for BSD and MacOSX compatibility
+
+1.107
+- improved IP address stuff
+
+1.106
+- minor fixes
+
+1.105
+- NEW: working prototype for CCS injection
+
+1.104
+- NEW: everywhere *also* RFC style ciphers -- if the mapping file is found
+- unitary calls to display cipher suites
+
+1.103
+- NEW: telnet support for STARTTLS (works only with a patched openssl version)
+  --> not tested (lack of server)
+
+1.102
+- NEW: test for BREACH (experimental)
+
+.101
+- BUGFIX: muted too verbose output of which on CentOS/RHEL
+- BUGFIX: muted too verbose output of netcat/nc on CentOS/RHEL+Debian
+
+1.100
+- further cleanup
+  - starttls now tests allciphers() instead of cipher_per_proto
+      (normal use case makes most sense here)
+  - ENV J_POSITIV --> SHOW_EACH_C
+- finding mapping-rfc.txt is now a bit smarter
+- preparations for ChaCha20-Poly1305 (would have provided binaries but
+  "openssl s_client -connect" with that ciphersuite fails currently with
+  a handshake error though client and server hello succeeded!)
+
+1.99
+- BUGFIX: now really really everywhere testing the IP with supplied name
+- locking out openssl < 0.9.8f, new function called "old_fart" ;-)
+- FEATURE: displaying PTR record of IP
+- FEATURE: displaying further IPv4/IPv6 addresses
+- bit of a cleanup
+
+1.98
+- http_header is in total only called once
+- better parsing of default protocol (FIXME shouldn't appear anymore)
+
+1.97
+- reduced sleep time for server hello and payload reply (heartbleed)
+
+1.96
+- NEW: (experimental) heartbleed support with bash sockets (shell only SSL handshake!)
+  see also https://testssl.sh/bash-heartbleed.sh
+
+1.95 (2.0rc3)
+- changed cmdline options for CRIME and renego vuln to uppercase
+- NEW: displays server key size now
+- NEW: displays TLS server extensions (might kill old openssl versions)
+- brown warning if HSTS < 180 days
+- brown warning if SSLv3 is offered as default protocol
+
+1.94
+- NEW: prototype of mapping to RFC cipher suite names, needed file mapping-rfc.txt in same dir
+  as of now only used for 'testssl.sh -V'
+- internal renaming: it was supposed to be "cipherlists" instead of "ciphersuites"
+- additional tests for cipherlists DES, 3DES, ADH
+
+1.93
+- BUGFIX: removed space in Server banner fixed (at the expense of showing just nothing if Server string is empty)
+
+1.92
+- BUGFIX: fixed error of faulty detected empty server string
+
+1.91
+- replaced most lcyan to brown (=not really bad but somehow)
+- empty server string better displayed
+- preferred CBC TLS 1.2 cipher is now brown (lucky13)
+
+1.90
+- fix for netweaver banner (server is lowercase)
+- no server banner is no disadvantage (color code)
+
+1.89
+- reordered! : protocols + cipher come first
+- colorized preferred server preference (e.g. CBC+RC4 is light red now, TLSv1.2 green)
+- SSLv3 is now light cyan
+- NEW: -P|--preference now in help menu
+- light cyan is more appropriate than red for HSTS
+
+1.88
+- NEW: prototype for protocol and cipher preference
+- prototype for session ticket
+
+1.87
+- changed just the version string to rc1
+
+1.86
+ - NEW: App banner now production, except 2 liners
+ - DEBUG: 1 is now true as everywhere else
+ - CRIME+Renego prettier
+ - last optical polish for RC4, PFS
+
+1.85
+ - NEW: appbanner (also 2 lines like asp.net)
+ - OSSL_VER_MAJOR/MINOR/APPENDIX
+ - less bold because bold headlines as bold should be reserved for emphasize findings
+ - tabbed output also for protocols and cipher classes
+ - unify neat printing
+
+1.84
+ - NEW: deprecating openssl version <0.98
+ - displaying a warning >= 0.98 < 1.0
+ - NEW: neat print also for all ciphers (-E,-e)
+
+1.83
+- BUGFIX: results from unit test: logical error in PFS+RC4 fixed
+- headline of -V / PFS+RC4 ciphers unified
+
+1.82
+- NEW: output for -V now better (bits separate, spacing improved)
+
+1.81
+- output for RC4+PFS now better (with headline, bits separate, spacing improved)
+- both also sorted by encr. strength .. umm ..err bits!
+
+1.80
+- order of finding supplied binary extended (first one wins):
+  1. use supplied variable $OPENSSL
+  2. use "openssl" in same path as testssl.sh
+  3. use "openssl.`uname -m`" in same path as testssl.sh
+  4. use anything in system $PATH (return value of "which"
+
+1.79
+- STARTTLS options w/o trailing 's' now (easier)
+- commented code for CRIME SPDY
+- issue a warning for openssl < 0.9.7 ( that version won't work anyway probably)
+
+1.78
+- -E, -e now sorted by encryption strength (note: it's only encr key length)
+- -V now pretty prints all local ciphers
+- -V <pattern> now pretty prints all local ciphers matching pattern (plain string, no regex)
+- bugfix: SSLv2 cipher hex codes has 3 bytes!
+
+1.77
+- removed legacy code (PROD_REL var)
+
+1.76
+- bash was gone!! disaster for Ubuntu, fixed
+- starttls+rc4 check: bottom line was wrong
+- starttls had too much output (certificate) at first a/v check
+
+1.75
+- location is now https://testssl.sh
+- be nice: banner, version, help also works for BSD folks (on dash)
+- bug in server banner fixed
+- sneaky referer and user agent possible
+
+1.74
+- Debian 7 fix
+- ident obsoleted
+
+1.72
+- removed obsolete GREP
+- SWURL/SWCONTACT
+- output for positive RC4 better
+
+1.71
+- workaround for buggy bash (RC4)
+- colors improved
+  - blue is now reserved for headline
+  - magenta for local probs
+  - in RC4 removal of SSL protocol provided by openssl
+
+1.70
+- DEBUG in http_headers now as expected
+- <?xml marker as HTML body understood
+
+1.69
+- HTTP 1.1 header
+- removed in each cipher the proto openssl is returning
++ NEW: cipher_per_proto
+
+1.68
+- header parser for openssl
+- HSTS
+
+[..]
+
+1.36
+* fixed issue while connecting to non-webservers
+
+1.35
+* fixed portability issue on Ubuntu
+
+1.34
+* ip(v4) address in output, helps to tell different systems apart later on
+* local hostname in output
+
+1.31 (Halloween Release)
+* bugfix: SSLv2 was kind of borken
+* now it works for sure but ssl protocol are kind of ugly
+
+1.30b (25.10.2012)
+* bugfix: TLS 1.1/1.2 may lead to false negatives
+* bugfix: CMDLINE -a/-e was misleading, now similar to help menu
+
+1.3 (10/13/2012)
+* can test now for cipher suites only
+* can test now for protocols suites only
+* tests for tls v1.1/v1.2 of local openssl supports it
+* commandline "all "is rename to "each-cipher"
+* banner when it's done
+
+1.21a (10/4/2012)
+* tests whether openssl has support for zlib compiled so that it avoids a false negative
+
+1.21 (10/4/2012)
+* CRIME support
+
+1.20b
+* bugfixed release
+
+1.20a
+* code cleanup
+* showciphers variable introduced: only show ciphers if this is set (it is by
+  default now and there's a comment
+* openssl version + path to it in the banner
+
+1.20
+* bugfix (ssl in ssl handshake failure is sometimes too much)
+* date in output
+* autodetection of CVS version removed
+
+1.19
+* bugfix
+1.18
+* Rearrangement of arguments: URL comes now always last!
+* small code cleanups for readability
+* individual cipher test is now with bold headline, not blue
+* NOPARANOID flag tells whether medium grade ciphers are ok. NOW they are (=<1.17 was paranoid)
+
+1.17
+* SSL tests now for renegotiation vulnerability!
+* version detection of testssl.sh
+* program has a banner
+* fixed bug leading to a file named "1"
+* comment for 128Bit ciphers
+
+1.16
+* major code cleanups
+* cmd line options: port is now in first argument!!
+* help is more verbose
+* check whether on other server side is ssl server listening
+* https:// can be now supplied also on the command line
+* test all ciphers now
+* new cleanup routine
+* -a does not do standard test afterward, you need to run testssl a second
+  time w/o -a if you want this
+
+1.12
+* tests also medium grade ciphers (which you should NOT use)
+* tests now also high grade ciphers which you SHOULD ONLY use
+* switch for more verbose output of cipher for those cryptographically interested .
+  in rows: SSL version, Key eXchange, Authentication, Encryption and Message Authentication Code
+* this is per default enabled (provide otherwise "" as VERB_CLIST)
+* as a courtesy I am providing 64+32 Linux binaries for testing 56 Bit ciphers
+
+1.11
+* Hint for howto enable 56 Bit ciphers for testing
+* possible to specify where openssl is (hardcoded, $ENV, last resort: auto)
+* warns if netcat is not there
+
+1.10
+* somewhat first released version