From e9db2574746662a439222922d0aa8d5e29bed6be Mon Sep 17 00:00:00 2001 From: Dirk Wetter Date: Tue, 17 Jan 2023 15:19:34 +0100 Subject: [PATCH] Start listing changes and contributions ... a few items by David and myself. It's a WIP and there are missing points. Feel free to amend the CHANGELOG.md and CREDITS.md. --- CHANGELOG.md | 13 ++++++++++++- CREDITS.md | 6 ++++++ 2 files changed, 18 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 3324bb2..3db39d6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,7 @@ ## Change Log -### Features implemented / improvements in 3.1dev +### Features implemented / improvements in 3.2rcX * Extend Server (cipher) preference: always now in wide mode instead of running all ciphers in the end (per default) * Improved compatibility with OpenSSL 3.0 @@ -31,6 +31,17 @@ * Client simulation runs in wide mode which is even better readable * Added --reqheader to support custom headers in HTTP requests * Test for support for RFC 8879 certificate compression +* Check for ffdhe groups +* New set of OpenSSL-bad binaries with STARTTLS xmpp-server +* Save a few cycles for ROBOT +* Provide a better verdict wrt to server order: Now per protocol and ciphers are + weighted for each protocol +* Remove "negotiated cipher / protocol" +* Extract CA list shows supported certification authorities sent by the server +* Show server supported signature algorithms +* Compatible to GNU grep 3.8 +* STARTTLS on active directory service works now + ### Features implemented / improvements in 3.0 diff --git a/CREDITS.md b/CREDITS.md index 126e0a4..dbd6b36 100644 --- a/CREDITS.md +++ b/CREDITS.md @@ -30,6 +30,12 @@ Full contribution, see git log. - pwnedkeys.com support - CT support - RFC 8879, certificate compression + - 128 cipher limit, padding + - compatibility for LibreSSL and different OpenSSL versions + - Check for ffdhe groups + - Show server supported signature algorithms + - Show supported certification authorities sent by the server when client auth is requested + - Provide a better verdict wrt to server order: Now per protocol and ciphers are weighted for each protocol - Lots of fixes and improvements ##### Further credits (in alphabetical order)