Unclaimed project
Are you a maintainer of testssl.sh? Claim this project to take control of your public changelog and roadmap.
Changelog
testssl.sh
Testing TLS/SSL encryption anywhere on any port
Back to changelogNew
Version 3.2.3 (bugfix)
TL;DR
- label missing KEMs as low severity to indicate that people should start using it
- changing in CA stores
- changes in unit tests
- clientHello contains <= 118 ciphers as more could cause problem for picky servers
- fixed ROBOT check for STARTTLS which sometimes caused inconsistent test results
- fixed confused "ADDTL_CA_FILES" enviroment variable
- fixed word pattern matching in /etc/hosts where
anystring matched alos 192.168.0.11 anystring-tomcat
- several minor fixes
What's Changed (full)
- Backport GH runner from 3.3dev by @drwetter in https://github.com/testssl/testssl.sh/pull/2900
- Fix #2896 by @dcooper16 in https://github.com/testssl/testssl.sh/pull/2898
- Consistency for function ciphers_by_strength() (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2906
- Fix file time stamp issue by @drwetter in https://github.com/testssl/testssl.sh/pull/2907
- Fix unittest 3.2 by @drwetter in https://github.com/testssl/testssl.sh/pull/2921
- Update linux ca store 3.2 by @drwetter in https://github.com/testssl/testssl.sh/pull/2918
Fix date for Ubuntu >= 25.10 (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2924Update "sneaky" user agent (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2928Shorten badssl GHA as they fail too often (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2932Fix date parsing bc of locale problem (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2931Add new Sectigo R46 cert, update Java/Mozilla.pem (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2936Fix pattern for matching /etc/hosts entries (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2939Label missing KEMs as LOW severity (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2962Fix #2959 by @dcooper16 in https://github.com/testssl/testssl.sh/pull/2964Add missing LF after pwnkeys DB check (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2966Add missing counter to ROBOT (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2970Mitigate inconsistent test results for ROBOT (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2976Finalize renaming MAX_WAITSOCK --> ROBOT_TIMEOUT (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2984Bump version (3.2) by @drwetter in https://github.com/testssl/testssl.sh/pull/2988Full Changelog: https://github.com/testssl/testssl.sh/compare/v3.2.2...v3.2.3