testssl.sh/Dockerfile.md

1.5 KiB

Usage

From git directory

git checkout 3.0
git pull
docker build .

Catch is when you run without image tags you need to catch the ID when building

[..]
---> 889fa2f99933
Successfully built 889fa2f99933

More comfortable is

git checkout 3.0
git pull
docker build -t mytestssl .
docker run --rm -t mytestssl example.com

You can also supply command line options like:

docker run -t mytestssl --help
docker run --rm -t mytestssl -p --header example.com

From dockerhub

You can pull the image from dockerhub and e.g run:

docker run --rm -t drwetter/testssl.sh:3.0 --protocols --server-preference example.com

Other tags supported are: 3.1dev and latest. They are the same, i.e. the rolling release. 3.0 is the latest stable version from git which might have a few improvements (see git log) over the released 3.0.X.

docker run --rm -t drwetter/testssl.sh:3.0 example.com.

Keep in mind that any output file (--log, --html, --json etc.) will be created in the container. If you wish to have this created in a local directory on your host you can mount a volume into the container and change the output prefix where the container user has write access to, e.g.:

docker run --rm -t -v /tmp:/data drwetter/testssl.sh:3.0 --htmlfile /data/ example.com

which writes the HTML output to /tmp/example.com_p443-<date>-<time>.html. The uid/gid is the one from the docker user but normally the file is 644. testssl.sh's docker container uses a non-root user (usually with user/groupid 1000:1000).