From 8b00ab4c47496a3f589ca828166e50dab6ff4ccd Mon Sep 17 00:00:00 2001 From: Dirk Date: Tue, 11 Mar 2025 15:57:25 +0100 Subject: [PATCH] Add a few extension numbers in the server hello Issue #2686 showed a server which listed an unknown extension number from RFC 8446. THis PR adds this number and a few (later) ones. It just lists them when detected in `parse_tls_serverhello()` See also https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml --- testssl.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/testssl.sh b/testssl.sh index 90dc716..079617b 100755 --- a/testssl.sh +++ b/testssl.sh @@ -14861,6 +14861,10 @@ parse_tls_serverhello() { 002F) tls_extensions+="TLS server extension \"certificate authorities\" (id=47), len=$extension_len\n" ;; 0030) tls_extensions+="TLS server extension \"oid filters\" (id=48), len=$extension_len\n" ;; 0031) tls_extensions+="TLS server extension \"post handshake auth\" (id=49), len=$extension_len\n" ;; + 0032) tls_extensions+="TLS server extension \"signature algorithms cert\" (id=50), len=$extension_len\n" ;; + 0034) tls_extensions+="TLS server extension \"transparency info \" (id=52), len=$extension_len\n" ;; + # 54,55,56 (x36 to x38) is DTLS + 003A) tls_extensions+="TLS server extension \"ticket request \" (id=58), len=$extension_len\n" ;; 3374) tls_extensions+="TLS server extension \"next protocol\" (id=13172), len=$extension_len\n" if [[ "$process_full" =~ all ]]; then local -i protocol_len