From 4b3a133a50a622171df66e0bef4731440ca92d40 Mon Sep 17 00:00:00 2001
From: David Cooper <dcooper16@gmail.com>
Date: Mon, 13 Apr 2026 12:58:31 -0700
Subject: [PATCH] Add missing TLS 1.3 Brainpool groups

This commit adds recognition of the TLS 1.3 Brainpool groups when parsing the supported_groups extension in the server's extensions.
---
 testssl.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/testssl.sh b/testssl.sh
index b4379c1..132b5b1 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -15255,6 +15255,9 @@ parse_tls_serverhello() {
                                          "0019") echo -n "secp521r1" >> $TMPFILE ;;
                                          "001D") echo -n "X25519" >> $TMPFILE ;;
                                          "001E") echo -n "X448" >> $TMPFILE ;;
+                                         "001F") echo -n "brainpoolP256r1tls13" >> $TMPFILE ;;
+                                         "0020") echo -n "brainpoolP384r1tls13" >> $TMPFILE ;;
+                                         "0021") echo -n "brainpoolP512r1tls13" >> $TMPFILE ;;
                                          "0029") echo -n "curveSM2" >> $TMPFILE ;;
                                          "0100") echo -n "ffdhe2048" >> $TMPFILE ;;
                                          "0101") echo -n "ffdhe3072" >> $TMPFILE ;;