2014-11-17 18:47:39 +01:00
|
|
|
|
2017-11-14 13:49:27 +01:00
|
|
|
* David Cooper (main contributor)
|
2014-11-17 18:47:39 +01:00
|
|
|
|
2017-07-13 14:00:41 +02:00
|
|
|
- Detection + output of multiple certificates
|
|
|
|
|
- several cleanups of server certificate related stuff
|
|
|
|
|
- extended parsing of TLS ServerHello messages
|
|
|
|
|
- testssl.sh -e/-E: testing with a mixture of openssl + sockets
|
2017-11-14 13:49:27 +01:00
|
|
|
- more ciphers
|
2017-07-13 14:00:41 +02:00
|
|
|
- finding more TLS extensions via sockets
|
|
|
|
|
- extensive CN+SAN <--> hostname check
|
2017-09-20 17:20:24 +02:00
|
|
|
- separate check for curves
|
2017-07-13 14:00:41 +02:00
|
|
|
- RFC 7919, key shares extension
|
|
|
|
|
- parallel mass testing!
|
2017-09-19 17:34:22 +02:00
|
|
|
- RFC <--> OpenSSL cipher name space switches for the command line
|
2017-07-13 14:00:41 +02:00
|
|
|
- numerous fixes
|
2017-11-14 13:49:27 +01:00
|
|
|
- better error msg suppression (not fully installed openssl
|
2017-09-19 17:34:22 +02:00
|
|
|
- GREASE support
|
2017-11-14 13:49:27 +01:00
|
|
|
- TLS 1.3 support
|
|
|
|
|
|
|
|
|
|
##### Credits also to
|
|
|
|
|
|
|
|
|
|
* Christoph Badura
|
|
|
|
|
- NetBSD fixes
|
|
|
|
|
|
|
|
|
|
* Frank Breedijk
|
|
|
|
|
- Detection of insecure redirects
|
|
|
|
|
- JSON and CSV output
|
|
|
|
|
- CA pinning
|
|
|
|
|
- Client simulations
|
|
|
|
|
- CI integration, some test cases for it
|
2017-09-19 17:34:22 +02:00
|
|
|
|
2017-07-13 14:00:41 +02:00
|
|
|
* Steven Danneman
|
2017-07-13 14:02:33 +02:00
|
|
|
- Postgres and MySQL STARTTLS support
|
2017-11-14 13:49:27 +01:00
|
|
|
* MongoDB support
|
2017-05-17 18:56:07 +02:00
|
|
|
|
2017-11-14 13:49:27 +01:00
|
|
|
* Mark Felder
|
|
|
|
|
- lots of cleanups
|
|
|
|
|
- Shellcheck static analysis
|
|
|
|
|
|
|
|
|
|
* Laine Gholson
|
|
|
|
|
- avahi/mDNS support
|
|
|
|
|
- HTTP2/ALPN
|
|
|
|
|
- bugfixes
|
|
|
|
|
- former ARM binary support
|
|
|
|
|
|
|
|
|
|
* Maciej Grela
|
|
|
|
|
- colorless handling
|
|
|
|
|
|
|
|
|
|
* Markus Manzke
|
|
|
|
|
- Fix for HSTS + subdomains
|
|
|
|
|
- LibreSSL patch
|
|
|
|
|
|
|
|
|
|
* Jean Marsault
|
|
|
|
|
- client auth: ideas, code snipplets
|
|
|
|
|
|
|
|
|
|
* Thomas Martens
|
|
|
|
|
- adding colorblind option
|
|
|
|
|
- no-rfc mapping
|
|
|
|
|
|
|
|
|
|
* Peter Mosmans
|
|
|
|
|
- started way better cmd line parsing
|
|
|
|
|
- cleanups, fixes
|
|
|
|
|
- openssl sources support with the "missing" features
|
|
|
|
|
|
|
|
|
|
* John Newbigin
|
|
|
|
|
- Proxy support (sockets and openssl)
|
2017-05-17 18:56:07 +02:00
|
|
|
|
2016-11-21 09:05:56 +01:00
|
|
|
* Oleksandr Nosenko
|
2017-05-17 18:56:07 +02:00
|
|
|
- non-flat JSON support (--json-pretty)
|
|
|
|
|
- in file output (CSV, JSON flat, JSON non-flat) support of a minimum severity level
|
2016-10-03 20:21:38 +02:00
|
|
|
|
2017-11-14 13:49:27 +01:00
|
|
|
* Jonathan Roach
|
|
|
|
|
- TLS_FALLBACK_SCSV checks
|
2016-01-30 23:57:00 +01:00
|
|
|
|
2017-11-14 13:49:27 +01:00
|
|
|
* Jonathon Rossi
|
|
|
|
|
- fix for bash3 (Darwin)
|
|
|
|
|
- and other Darwin fixes
|
2017-05-17 18:56:07 +02:00
|
|
|
|
2017-11-14 13:49:27 +01:00
|
|
|
* Дилян Палаузов
|
|
|
|
|
- bug fix for 3des report
|
|
|
|
|
- reported a tricky STARTTLS bug
|
|
|
|
|
|
|
|
|
|
* Thomas Patzke:
|
|
|
|
|
- Support of supplying timeout value for openssl connect
|
2015-06-29 23:31:51 +02:00
|
|
|
|
2015-07-21 10:25:17 +02:00
|
|
|
* Olivier Paroz
|
2017-05-17 18:56:07 +02:00
|
|
|
- conversion xxd --> hexdump stuff
|
2015-07-21 10:25:17 +02:00
|
|
|
|
2015-08-04 10:33:48 +02:00
|
|
|
* Jeroen Wiert Pluimers
|
2016-10-03 20:21:38 +02:00
|
|
|
- Darwin binaries support
|
2015-08-04 10:33:48 +02:00
|
|
|
|
2015-07-21 10:25:17 +02:00
|
|
|
* Rechi
|
2017-07-13 14:00:41 +02:00
|
|
|
- initial MX stuff
|
|
|
|
|
- fixes
|
2015-06-29 23:31:51 +02:00
|
|
|
|
2017-11-14 13:49:27 +01:00
|
|
|
* Dmitri S
|
|
|
|
|
- inspiration & help for Darwin port
|
2015-03-17 22:14:05 +01:00
|
|
|
|
2015-08-02 00:07:08 +02:00
|
|
|
* Viktor Szépe
|
2017-07-13 14:00:41 +02:00
|
|
|
- color function maker
|
2015-08-02 00:07:08 +02:00
|
|
|
|
2017-11-14 13:49:27 +01:00
|
|
|
* Julien Vehent
|
|
|
|
|
- supplied 1st Darwin binary
|
2016-02-01 22:41:36 +01:00
|
|
|
|
2017-11-14 13:49:27 +01:00
|
|
|
* @typingArtist
|
|
|
|
|
- improved BEAST detection
|
|
|
|
|
|
|
|
|
|
* @f-s
|
|
|
|
|
- ARM binary support
|
2015-07-21 10:25:17 +02:00
|
|
|
|
2015-03-13 12:21:06 +01:00
|
|
|
* @nvsofts (NV)
|
2017-07-13 14:02:33 +02:00
|
|
|
- LibreSSL patch for GOST
|
2015-03-13 12:21:06 +01:00
|
|
|
|
2017-05-17 18:56:07 +02:00
|
|
|
Others I forgot to mention which did give me feedback, bug reports and helped one way or another.
|
|
|
|
|
|
2014-11-17 18:47:39 +01:00
|
|
|
|
2014-11-17 18:59:57 +01:00
|
|
|
##### Last but not least:
|
2014-11-17 18:47:39 +01:00
|
|
|
|
2016-01-15 17:05:43 +01:00
|
|
|
* OpenSSL team for providing openssl.
|
|
|
|
|
|
2016-01-23 19:25:45 +01:00
|
|
|
* Ivan Ristic/Qualys for the liberal license which made it possible to use the client data
|
2014-11-17 18:47:39 +01:00
|
|
|
|
2017-05-17 18:56:07 +02:00
|
|
|
* My family for supporting me doing this work
|
2016-10-03 20:21:38 +02:00
|
|
|
|
