Skip to content

Commit 050a141

Browse files
Auto-generate docs from testssl.1.md [skip ci]
1 parent a13eb75 commit 050a141

2 files changed

Lines changed: 13 additions & 3 deletions

File tree

doc/testssl.1

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -417,7 +417,8 @@ can try to apply evasion techniques by changing the variables USLEEP_SND
417417
and / or USLEEP_REC and maybe MAX_WAITSOCK.
418418
.PP
419419
\f[CR]\-\-phone\-out\f[R] Checking for revoked certificates via CRL and
420-
OCSP is not done per default.
420+
OCSP, as well as the HSTS preload list status via hstspreload.org, is
421+
not done per default.
421422
This switch instructs testssl.sh to query external \(en in a sense of
422423
the current run \(en URIs.
423424
By using this switch you acknowledge that the check might have privacy
@@ -603,6 +604,10 @@ by detection or by enforcing via \f[CR]\-\-assume\-http\f[R].
603604
It tests several HTTP headers like
604605
.IP \(bu 2
605606
HTTP Strict Transport Security (HSTS)
607+
.RS 2
608+
.IP \(bu 2
609+
HSTS preload list status (when \f[CR]\-\-phone\-out\f[R] supplied)
610+
.RE
606611
.IP \(bu 2
607612
HTTP Public Key Pinning (HPKP)
608613
.IP \(bu 2

doc/testssl.1.html

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -396,7 +396,8 @@ <h3 id="tuning-options">TUNING OPTIONS</h3>
396396
evasion techniques by changing the variables USLEEP_SND and / or
397397
USLEEP_REC and maybe MAX_WAITSOCK.</p>
398398
<p><code>--phone-out</code> Checking for revoked certificates
399-
via CRL and OCSP is not done per default. This switch instructs
399+
via CRL and OCSP, as well as the HSTS preload list status via
400+
hstspreload.org, is not done per default. This switch instructs
400401
testssl.sh to query external – in a sense of the current run –
401402
URIs. By using this switch you acknowledge that the check might
402403
have privacy issues, a download of several megabytes (CRL file)
@@ -548,7 +549,11 @@ <h3 id="single-check-options">SINGLE CHECK OPTIONS</h3>
548549
<code>--assume-http</code>. It tests several HTTP headers
549550
like</p>
550551
<ul>
551-
<li>HTTP Strict Transport Security (HSTS)</li>
552+
<li>HTTP Strict Transport Security (HSTS)
553+
<ul>
554+
<li>HSTS preload list status (when <code>--phone-out</code>
555+
supplied)</li>
556+
</ul></li>
552557
<li>HTTP Public Key Pinning (HPKP)</li>
553558
<li>Server banner</li>
554559
<li>HTTP date+time</li>

0 commit comments

Comments
 (0)