Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

updated 

with TLS 1.3 and forgotten improvements so far.
Add interesting projekt privacyscore.
This commit is contained in:
Dirk 2017-11-14 13:52:13 +01:00
parent 2379af5a5f
commit 6ce2a98637
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
Readme.md
View File

@ -60,8 +60,9 @@ Update notification here or @ [twitter](https://twitter.com/drwetter).
#### Features implemented in [2.9dev](Readme.md#devel) #### Features implemented in [2.9dev](Readme.md#devel)
* Using bash sockets where ever possible --> better detection of ciphers, independent on the openssl version used. * Using bash sockets where ever possible --> better detection of ciphers, independent on the openssl version used.
* Testing 359 default ciphers (``testssl.sh -e/-E``) with a mixture of sockets and openssl. Same speed as with openssl only but additional ciphers such as post-quantum ciphers, new CHAHA20/POLY1305, CamelliaGCM etc. * Testing 364 default ciphers (``testssl.sh -e/-E``) with a mixture of sockets and openssl. Same speed as with openssl only but additional ciphers such as post-quantum ciphers, new CHAHA20/POLY1305, CamelliaGCM etc.
* Further tests via TLS sockets and improvements (handshake parsing, completeness, robustness), TLS 1.2 protocol check via socket in production * Further tests via TLS sockets and improvements (handshake parsing, completeness, robustness),
* TLS 1.2 protocol check via socket in production
* Finding more TLS extensions via sockets * Finding more TLS extensions via sockets
* TLS Supported Groups Registry (RFC 7919), key shares extension * TLS Supported Groups Registry (RFC 7919), key shares extension
* Non-flat JSON support * Non-flat JSON support
@ -74,16 +75,22 @@ Update notification here or @ [twitter](https://twitter.com/drwetter).
* Choice showing the RFC naming scheme only * Choice showing the RFC naming scheme only
* LUCKY13 and SWEET32 checks * LUCKY13 and SWEET32 checks
* Ticketbleed check * Ticketbleed check
* Decoding of unencrypted BIG IP cookies
* LOGJAM: now checking also for known DH parameters * LOGJAM: now checking also for known DH parameters
* Check for CAA RR * Check for CAA RR
* Check for OCSP must staple * Check for OCSP must staple
* Check for Certificate Transparency * Check for Certificate Transparency
* Expect-CT Header Detection
* Check for session resumption (Ticket, ID) * Check for session resumption (Ticket, ID)
* TLS Robustness check (GREASE) * TLS Robustness check (GREASE)
* Postgres und MySQL STARTTLS support, MongoDB support * Postgres und MySQL STARTTLS support, MongoDB support
* Decodes BIG IP F5 Cookie * Decodes BIG IP F5 Cookie
* Better OpenBSD, better LibreSSL support * Better OpenBSD, better LibreSSL support
* Missing SAN warning
* Man page * Man page
* Better error msg suppression (not fully installed OpenSSL)
* DNS over Proxy and other proxy improvements
* TLS 1.3 support
#### Further features planned in 2.9dev #### Further features planned in 2.9dev
@ -127,6 +134,9 @@ respective projects
#### A ready-to-go docker image is at: #### A ready-to-go docker image is at:
* https://quay.io/repository/jumanjiman/testssl * https://quay.io/repository/jumanjiman/testssl
#### Privacy checker using testssl.sh
* https://privacyscore.org
#### Brew package #### Brew package
* see [#233](https://github.com/drwetter/testssl.sh/issues/233) and * see [#233](https://github.com/drwetter/testssl.sh/issues/233) and