Docker Image - testssl-Webfrontend

Project Details

This Docker Image is is a fork of mycloudrevolution/testssl-webfrontend from Markus Kraus based on the testssl.sh-webfrontend Project from thyssenkrupp CERT. The testssl.sh-web Application uses the testssl.sh Script from Dirk Wetter.

docker pull ghcr.io/shartge/testssl-web
docker run --rm --name testssl-web -p 5000:5000 ghcr.io/shartge/testssl-web

Configuration

Number of concurrent SSL tests

You can configure the number of uWSGI processes and threads inside the container via the variables UWSGI_PROCESSES and UWSGI_THREADS. Both control how many SSL tests can be run concurrently.

The default is to have 4 uWSGI processes with 2 threads each.

Example:

docker run --rm --name testssl-web -e UWSGI_THREADS=8 -e UWSGI_PROCESSES=2 -p 5000:5000 ghcr.io/shartge/testssl-web

Setting the timeout

You can configure the timeout for each test by setting the variable TEST_TIMEOUT.

The default timeout is 300 seconds.

Example:

docker run --rm --name testssl-web -e TEST_TIMEOUT=600 -p 5000:5000 ghcr.io/shartge/testssl-web

Enabling debugging

You can debug testssl.sh by setting the variable TESTSSLDEBUG.

Values from 0 (no debugging, default) to 6 (maximum debug level) are possible.

I recommend to also increase TEST_TIMEOUT to at least 600 when debugging.

The default debug level is 0.

Example:

docker run --rm --name testssl-web -e TESTSSLDEBUG=2 -e TEST_TIMEOUT=600 -p 5000:5000 ghcr.io/shartge/testssl-web

Integration into external Nginx

If you want to use testssl-web behind a Nginx proxy you need to make sure to disable proxy_buffering in Nginx or otherwise the streaming updates during the running test will not appear.

Example:

location /testssl {
    proxy_pass       http://localhost:5000;
    proxy_set_header Host      $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_buffering  off;
}