Commit Graph

51 Commits

Author SHA1 Message Date
4d10873727 Amend changes and attributions 2025-04-22 16:47:54 +02:00
ecaa7878e5 Support ML-DSA server keys
This commit adds support for server certificates that have ML-DSA pubilc keys. It also adds supports for certificates that are signed with ML-DSA or SLH-DSA. The ML-DSA code points for the signature_algorithms extension are taken from https://datatracker.ietf.org/doc/draft-tls-westerbaan-mldsa/ and are the ones used by OpenSSL 3.5.0.
2025-04-10 09:15:04 -07:00
ec1d28ea24 Update CHANGELOG.md and CREDITS.md
This commit adds information about #2687, #2688, and #2690 to the change log.
2025-03-11 12:48:48 -07:00
ebc43ddafe Add previously added line from 3.0 in change log
for consistency reasons
2025-02-07 12:40:06 +01:00
4b928108ec Add trotteling feature
* reorder points
* add sieve also
2025-01-31 11:39:45 +01:00
76cdf3166a fix typo 2025-01-24 14:53:52 +01:00
163d744c13 Add recent and bigger changes
From today back to 1f37a8406f
2025-01-24 11:32:41 +01:00
b708026151 Change orga from drwetter --> testssl
... to avoid redirects on the client side and to make repo migration better visible.

Also amend 'Status' and 'Contributing' in Readme.md. bluesky added, albeit mastodon
seems more interactive. Clarify twitter account is not in use anymore.
2025-01-06 15:34:45 +01:00
733c2d31b7 Automagic with openssl and TLS 1.3-only host 2024-09-06 17:37:42 +02:00
83fb9b5b3a Update CHANGELOG.md 2024-01-20 11:49:41 +01:00
2b2e36352c Merge branch '3.2' into changelog_3.2 2023-10-10 11:32:12 +02:00
b0d035cbf4 went though the log from today back to Nov 22 2023-10-10 11:13:44 +02:00
b6143e1fb9 Change references from 3.1dev to 3.2 2023-07-31 12:40:56 +02:00
91f3d9716b amending previous commit 2023-03-23 15:05:15 +01:00
48a597e19d don't forget the kudos ;-) 2023-03-23 09:11:14 +01:00
e9db257474 Start listing changes and contributions
... a few items by David and myself.

It's a WIP and there are missing points. Feel free to amend the
CHANGELOG.md and CREDITS.md.
2023-01-17 15:19:34 +01:00
fcb282e3c3 Typos found by codespell
Run codespell in CI
2021-09-14 13:33:39 +02:00
b1f5c6c9af Trim excess whitespace 2021-09-04 13:28:30 +00:00
6782e2a3b9 Fix spelling 2021-09-04 12:39:03 +00:00
fa1ccdb565 Check for RFC 8879 certificate compression
This commit adds a check for whether the server supports certificate compression (RFC 8879). If it does, then the list of supprted compression methods is output in the server's preference order.
2021-08-04 14:39:12 -04:00
e1a43e6e16 Merge branch '3.1dev' into starttls_injection 2020-12-29 13:46:18 +01:00
351f36c943 Changed parameter to --reqheader for custom HTTP headers. 2020-12-25 20:10:02 +01:00
1473cdf02d Update CHANGELOG.md 2020-12-24 22:00:42 +01:00
d76829cd28 wide mode for client simulation 2020-12-08 19:52:42 +01:00
9ea7446203 Add STARTTLS injection to Changelog 2020-11-26 10:48:32 +01:00
a019b3d396 --overwrite / X-XSS-Protection 2020-11-13 19:26:47 +01:00
45059ed769 Merge branch '3.1dev' into ssl_renego_mod 2020-10-20 19:40:58 +02:00
j
a252eeb11d Updated changelog 2020-10-19 22:37:10 +02:00
4d6dba79e6 Update man pages and CHANGELOG 2020-10-19 07:32:41 +00:00
edf669711f Merge pull request #1718 from drwetter/winshock
New feature: winshock
2020-09-08 22:11:36 +02:00
ad8a52ec4f Updated changelog and credits 2020-09-08 15:34:30 +02:00
a1a0605082 add winshock 2020-09-08 13:42:33 +02:00
ecc6cd8160 Allow dir with PEM files for --add-CA
Idea which popped up while following #1700
2020-08-18 21:52:59 +02:00
a2929211b2 Merge pull request #1697 from drwetter/no_starttls_detection2
Trying to address no STARTTLS offerings (2)
2020-08-11 16:27:24 +02:00
1915a7b624 STARTTLS 2020-08-11 15:41:20 +02:00
4653613211 Add mitigate_javastore4rating 2020-08-11 15:36:43 +02:00
3ae48931fb Support EdDSA
This commit adds support for EdDSA (Ed25519 and Ed448). In particular:

* It modifies prepare_tls_clienthello() to include Ed25519 and Ed448 in the signature_algorithms extension of the TLS 1.2 and earlier ClientHello (RFC 8422).

* It modifies run_server_defaults() and get_server_certificate() to check whether the server offers EdDSA certificates with TLS 1.3.

* It modifies certificate_info() to handle certificates signed with EdDSA or with EdDSA public keys, even if $OPENSSL does not support pretty printing such keys and signatures.

* It modifies read_sigalg_from_file() to recognize EdDSA signatures even if $OPENSSL does not.
2020-05-18 07:37:46 -04:00
78a95d73c8 Add BREACH extension 2020-05-11 14:07:02 +02:00
53ee37b046 XMPP server 2020-05-01 18:03:19 +02:00
ebe75252fa Merge branch '3.1dev' into magnuslarsen-grading_dev 2020-05-01 17:36:29 +02:00
13a76bc719 (try to) resolve merge conflict 2020-04-28 13:35:24 +02:00
50d10d00f7 Add latest changes
including the one since 3.0
2020-04-27 19:19:19 +02:00
577370a272 Add rating 2020-04-20 22:49:31 +02:00
3e8d1983b3 reorder / rephrase some points 2020-01-20 12:49:49 +01:00
2ea57f0701 Update attributions and Changes for release
If anything is missing or wrong please let us know or do a PR.

(This is until from earlier time to ~2018. >2019 need to follow)
2020-01-17 11:01:41 +01:00
554b49bc75 Add David's downgrade checks, Dirk's improvements for OpenBSD 2020-01-08 11:22:09 +01:00
2b08b593a8 Amend with log for upcoming rc6 2019-12-11 21:49:23 +01:00
35f70f2375 Amendments + reordering
add IDN etc. -support and David's work on determine_optimal_* functions
2019-11-02 10:20:57 +01:00
b2bf5b72bd Add SNI/STARTTLS, pwnedkeys 2019-06-12 15:41:07 +02:00
378a5b0547 Fold all Changelogs into one file 2019-04-24 20:42:51 +02:00