Update attributions and Changes for release

If anything is missing or wrong please let us know or do a PR.

(This is until from earlier time to ~2018. >2019 need to follow)
This commit is contained in:
Dirk
2020-01-17 10:59:47 +01:00
parent 91e14a3840
commit 2ea57f0701
2 changed files with 55 additions and 20 deletions

View File

@ -1,24 +1,39 @@
Full contribution, see git log.
* Dirk Wetter (founder, maintainer and main contributor)
- Everything what's not mentioned below and is included in testssl.sh's git log
minus what I probably forgot to mention
(too much other things to do at the moment and to list it would be a tough job)
* David Cooper (main contributor)
- Major extensions to socket support for all protocols
- extended parsing of TLS ServerHello messages
- TLS 1.3 support (final and pre-final)
- add several TLS extensions
- Detection + output of multiple certificates
- several cleanups of server certificate related stuff
- extended parsing of TLS ServerHello messages
- testssl.sh -e/-E: testing with a mixture of openssl + sockets
- more ciphers
- finding more TLS extensions via sockets
- add more ciphers
- coloring of ciphers
- extensive CN+SAN <--> hostname check
- separate check for curves
- RFC 7919, key shares extension
- keyUsage extension in certificate
- experimental "eTLS" detection
- parallel mass testing!
- RFC <--> OpenSSL cipher name space switches for the command line
- numerous fixes
- better error msg suppression (not fully installed openssl
- GREASE support
- Bleichenbacher vulnerability test
- TLS 1.3 support
- Bleichenbacher / ROBOT vulnerability test
- several protocol preferences improvements
- pwnedkeys.com support
- CT support
- Lots of fixes and improvements
##### Credits also to
##### Further credits (in alphabetical order)
* Christoph Badura
- NetBSD fixes
@ -32,7 +47,10 @@
* Steven Danneman
- Postgres and MySQL STARTTLS support
* MongoDB support
- MongoDB support
* Christian Dresen
- Dockerfile
* Mark Felder
- lots of cleanups
@ -47,6 +65,15 @@
* Maciej Grela
- colorless handling
* Hubert Kario
- helped with avoiding accidental TCP fragmentation
* Jacco de Leeuw
- skip checks which might trigger an IDS ($OFFENSIVE / --ids-friendly)
* Manuel
- HTTP basic auth
* Markus Manzke
- Fix for HSTS + subdomains
- LibreSSL patch
@ -94,9 +121,15 @@
- initial MX stuff
- fixes
* Gonçalo Ribeiro
- --connect-timeout
* Dmitri S
- inspiration & help for Darwin port
* Marcin Szychowski
- Quick'n'dirty client certificate support
* Viktor Szépe
- color function maker
@ -112,14 +145,14 @@
* @nvsofts (NV)
- LibreSSL patch for GOST
Others I forgot to mention which did give me feedback, bug reports and helped one way or another.
Probably more I forgot to mention which did give me feedback, bug reports and helped one way or another.
##### Last but not least:
* OpenSSL team for providing openssl.
* Ivan Ristic/Qualys for the liberal license which made it possible to use the client data
* Ivan Ristic/Qualys for the liberal license which made it possible to make partly use of the client data
* My family for supporting me doing this work