testssl.sh

@testssl.bsky.social

23 Followers 18 Following

Posts in EN about testssl.sh and related stuff The bridge from the fediverse is also here (https://bsky.app/profile/testssl.infosec.exchange.ap.brid.gy). But might cut postings due to size limitations of bspky .

There was parsing issue in HTTP Age header which looked on the first glance security relevant. Closer look revealed it's just a type confusion. But it's still recommended to update. Also this release includes a FAQ. More important details below.
What's Changed

Add README DeepWiki Link by @HarrisonTCodes
Modify grading for incomplete chain. by @secinto
Add sectigo CA E46 and R46 for Linux.pem by @drwetter
Improve error message for sockets fail and Alpine by @drwetter
Make code2network() faster by using bash instead of tr by @drwetter
Fix not working --disable-rating switch by @drwetter
feat: bump ssllabs rating guide to 2009r by @magnuslarsen
For Mac: use homebrew's openssl when necessary+needed by @drwetter
Fix displayed message when IPv6 needs to be tested too by @drwetter
FAQ for 3.2 by @drwetter in #2881
Fix garbled screen when HTTP Age is not a non-negative int (branch 3.2) by @drwetter
Fix indentation @ Intermediate cert validity (3.2) by @drwetter
Lucky13: improve phrasing for 3.2 by @drwetter
Bump version (3.2) by @drwetter in #2890

New Contributors

@HarrisonTCodes made their first contribution in #2801
@secinto made their first contribution in #2798

Full Changelog: v3.2.1...v3.2.2

adges in the Readme @ github, including the Github runners for Ubuntu and MacOS

testssl.sh handshake simulation showing also Android 15 handshake with the hybrid PQ kx X25519MLKEM768

showing a row of the client simulation output

OpenSSL 3.5.0 (git) TLSv1.3 TLS_AES_128_GCM_SHA256 X25519MLKEM768