search

drwetter / testssl.sh

Testing TLS/SSL encryption anywhere on any port
https://testssl.sh
GNU General Public License v2.0
7.94k stars 1.02k forks source link

[possible BUG] socat[...] W exiting on signal 15 #2582

Closed j75 closed 2 days ago

j75 commented 2 days ago

I always get the message socat[...] W exiting on signal 15 (15 = SIGTERM) at the end of a test on a Postfix server - is it an error or a feature?

I am running version testssl.sh version 3.2rc3 from https://testssl.sh/dev/ (d203d532 2024-10-12 08:53:19)

I couldn't find anything related to this message.

Command line / docker command to reproduce

Which was your command line? TESTSSL_INSTALL_DIR=/usr/share/testssl testssl.sh --html --starttls smtp -s -H -f --wide --show-each --protocols -U --openssl=/usr/bin/openssl mail.home.famion.eu:587

Expected behavior

A report with a grade in the end.

My system:

Additional context

My SMTP server is Postfix 3.7.11

j75 commented 2 days ago

Running docker run --rm -ti drwetter/testssl.sh --starttls smtp -s -H -f --wide --show-each --protocols -U mail.home.famion.eu:587 ends with the same message: socat[...] W exiting on signal 15

drwetter commented 2 days ago

Thanks for reporting.

For the record: 

RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)
STARTTLS injection (CVE-2011-0411, exp.)  not vulnerable (OK)
2024/10/14 17:41:54 socat[11427] W exiting on signal 15

Done 2024-10-14 17:41:54 [  42s] -->> ....
j75 commented 2 days ago

For the record - I was reading the issue 1833 where the report ends like that:

Final Score               0
Overall Grade             T
**Grade cap reasons       Grade capped to T. Encryption via STARTTLS is n...**

This is what I have expected; it looks like the HTTPS report, so I thought it is the normal output.

drwetter commented 2 days ago

FYI @j75 , maybe we're talking about different things. For grading to work you cannot restrict testing on the items which you like. You need the full nine yards.

The message 2024/10/14 17:41:54 socat[11427] W exiting on signal 15 is just too verbose as socat was put in the background and killed after processing. That would need to be fixed. It did not happened under Debian 12 to me but under some Opensuse and MacOS.

The other point is maybe a user error 😉 .