Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-10-31 22:05:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add SNI/STARTTLS, pwnedkeys

Browse Source
This commit is contained in:
Dirk Wetter
2019-06-12 15:41:07 +02:00
parent 912cd906d2
commit b2bf5b72bd
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@@ -21,6 +21,7 @@
* TLS Robustness check (GREASE) * TLS Robustness check (GREASE)
* Expect-CT Header Detection * Expect-CT Header Detection
* `--phone-out` does certificate revocation checks via OCSP (LDAP+HTTP) and with CRL * `--phone-out` does certificate revocation checks via OCSP (LDAP+HTTP) and with CRL
* `--phone-out` checks whether the private key has been compromised via https://pwnedkeys.com/
* Fully OpenBSD and LibreSSL support * Fully OpenBSD and LibreSSL support
* Missing SAN warning * Missing SAN warning
* Added support for private CAs * Added support for private CAs
@@ -33,6 +34,7 @@
* Better support for XMPP via STARTTLS & faster * Better support for XMPP via STARTTLS & faster
* Certificate check for to-name in stream of XMPP * Certificate check for to-name in stream of XMPP
* Support for NNTP via STARTTLS * Support for NNTP via STARTTLS
* Support for SNI and STARTTLS
* More robustness for any STARTTLS protocol (fall back to plaintext while in TLS) * More robustness for any STARTTLS protocol (fall back to plaintext while in TLS)
* Fixed TCP fragmentation * Fixed TCP fragmentation
* Added `--ids-friendly` switch * Added `--ids-friendly` switch