Dirk
85232b7bc5
Chromium 137 Win 11
2025-04-09 19:31:35 +02:00
Dirk
84e77d2bb0
Java 21
2025-04-09 17:07:19 +02:00
Dirk
31e2f43eec
LibreSSL update 3.3.6 (MacOS)
...
.. renaming that to macOS instead "Apple".
2025-04-09 16:51:26 +02:00
Dirk
4f696f94df
Add openssl 3.0.15 (from Debian)
...
... and set OpenSSL 3.0.3 (git) as not to list
2025-04-09 16:39:05 +02:00
Dirk
e4cdca9e63
Add Safari 18.4 @ MacOS 15.4
2025-04-09 15:53:11 +02:00
Dirk
d601f33a37
Merge branch '3.2' into new_Handshakes
2025-04-09 10:59:40 +02:00
David Cooper
3a8038636d
OpenSSL 3.5.0 client simulation
...
Add OpenSSL 3.5.0 to etc/client-simulation.txt.
2025-04-08 15:26:41 -07:00
Dirk
0d7c33ab7f
deprecate more
...
- Safari 12.1 (iOS 12.2)
- Firefox 66 (Win 8.1/10)
2025-04-08 16:14:37 +02:00
Dirk
887653a033
Deprecate a few entries ...
...
- Android 5+6
- Chrome 79 Win 10
- IE 6 XP
- IE 8 XP
- Safari 13.0 (macOS 10.14.6)
- OpenSSL 1.1.0l (Debian)
... before new ones are added
2025-04-08 16:06:55 +02:00
Dirk
7939144af1
Swap Android 6 for Android 5
...
... as it seems to habe more market share
2025-04-08 15:49:44 +02:00
Dirk
58ddfd8a24
Add hint for JA3/4
...
+ minor corrections
2025-04-07 19:38:05 +02:00
Dirk
45be26db7c
Add Java 8u442 handshake
...
Also the ja3 and ja4 values were added as retrieved from wireshark.
See also #2430 .
2025-04-07 19:36:34 +02:00
David Cooper
683f028164
Support draft-connolly-tls-mlkem-key-agreement
...
This commit adds support for the three code points in draft-connolly-tls-mlkem-key-agreement.
2025-03-06 11:42:00 -08:00
Teun Vink
42f20b59b1
fix missing semicolon in docs
2025-01-30 10:23:12 +01:00
Dirk Wetter
0042b6313e
s/drwetter/testssl
...
For the remaining occurences. Except dockerhub which needs to be solved.
2025-01-24 11:15:55 +01:00
David Cooper
11d7979f41
Support draft-kwiatkowski-tls-ecdhe-mlkem and draft-tls-westerbaan-xyber768d00
...
This commit adds support for the three code points in draft-kwiatkowski-tls-ecdhe-mlkem and the code point 0x6399 from draft-tls-westerbaan-xyber768d00. The group 0x6399 uses a pre-standard version of Kyber and is considered obsolete.
2025-01-21 09:00:21 -08:00
David Cooper
e17b1c17bb
Support RFC 9150 cipher suites
...
This commit adds support for the two cipher suites in RFC 9150, TLS_SHA256_SHA256 and TLS_SHA384_SHA384. These are authentication and integrity-only cipher suites.
2024-10-28 15:07:22 -07:00
Dirk
76902af3b8
update hashes
2024-07-23 11:35:49 +02:00
Dirk
69c1a2fcb8
need to update hashes needs to be earlier
2024-07-23 11:35:16 +02:00
Dirk
778aab0241
dos2unix
2024-07-23 11:34:38 +02:00
Dirk
95ed863ac0
update MS CA root store
2024-07-23 10:42:14 +02:00
Dirk
472eff85b1
Update Apple CA store
...
...and modify readme to reflect that the certificates are better to retrieve from GH
2024-07-22 17:08:18 +02:00
Dirk
3a9c0aa8ed
Update Truststores
...
- Mozilla: 2024-7-02
- Debian 12, ca-certificates from 20230311
- JDK 21.04
See also #2525
ToDo:
- Apple (https://opensource.apple.com/source/security_certificates/ doesnt exist anymore), github?
- MS
- Check old LE CA
- update hashes
- update Readme
2024-07-22 16:38:45 +02:00
Dirk
23c2b24c3d
MUST update hashes
2023-12-24 14:00:34 +01:00
Dirk
db175a8d51
Update of certificate stores
...
Mozilla: 2023-08-22
Debian 10
JDK 22
Windows 10 22H2, Patched until 2023-10
Apple: 2023-10
2023-10-09 22:08:48 +02:00
David Cooper
d0e1c4a8e7
Fix line endings in etc/curves-mapping.txt
...
The file etc/curves-mapping.txt currently has CRLF line endings and this seems to cause problems with git since .gitattributes now specifies LF line endings for .txt files. This commit changes the line endings for the file in order to (hopefully) prevent problems with git.
2023-07-03 08:50:23 -07:00
David Cooper
5002dd23b1
Add support for brainpool curves with TLS 1.3
...
This commit adds support for the curves brainpoolP256r1tls13, brainpoolP384r1tls13, and brainpoolP512r1tls13.
2023-03-28 08:53:20 -07:00
Dirk Wetter
aac696b0a0
Updated root CA stores
2023-03-17 18:06:57 +01:00
Dirk Wetter
6106887fdd
Update DST CA
2023-03-17 18:06:03 +01:00
Dirk Wetter
419aae3c98
updates docu to reflekt actual status
2023-03-17 18:05:24 +01:00
Dirk Wetter
12654b904b
Update README.md
2022-07-02 22:12:56 +02:00
Dirk
e217af0324
Remove the expired DST Root CA X3 cert from ...
...
Apple / Linux / Microsoft stores
2022-07-02 16:02:30 +02:00
Dirk
d79504ea8a
Reference to remove DST Root CA
2022-07-02 16:00:16 +02:00
Dirk
9f4a3b359c
add new stores
2022-07-02 15:59:00 +02:00
Dirk
fb2b4935ac
Java.pem from Oracle jdk-17.0.3.1
2022-07-01 22:01:36 +02:00
Dirk
dca2672d88
Apple.pem: picked from Internet (see etc/Readme.md)
2022-07-01 21:55:43 +02:00
Dirk
285eb60d45
add loop for Apple.pem
2022-07-01 21:51:25 +02:00
Dirk
f1003d62f8
fine tune instructions for Apple.pem
2022-07-01 21:45:02 +02:00
Dirk
8b580d1448
Update cert store: Linux + Mozilla
2022-07-01 21:32:38 +02:00
Dirk Wetter
c92a648391
Add LibreSSL from MacOS
2022-05-31 16:17:47 +02:00
Dirk Wetter
854028166d
Including AppleMail
2022-05-31 15:12:16 +02:00
Dirk Wetter
b274e3b858
correct openssl 3.0.3 data which made CI action fail
2022-05-31 14:32:47 +02:00
Dirk Wetter
a21a343c1c
disable Java 12 and Safari on OS X 10.12
2022-05-31 12:17:38 +02:00
Dirk Wetter
09432f0346
minor fix: italic markdown
2022-05-31 12:10:36 +02:00
Dirk Wetter
f90b473b32
Add Thunderbid 91.9 to hanshak simulation
2022-05-31 12:10:11 +02:00
Dirk Wetter
86158f0bdf
Firefox 100, Chrom and Edge 101 (Win10)
...
- disabled Opera (too old)
- disabled ATS 9 / iOS 9
- reenabled Android 8.1
2022-05-09 17:49:16 +02:00
Dirk Wetter
22d8cd3adf
Go client (1.17)
2022-05-06 10:06:03 +02:00
Dirk Wetter
cf79a19598
Add Android 11+12
2022-05-04 19:12:03 +02:00
Dirk Wetter
28e9ddeebd
Teating of FFDHE groups
...
* readded to the markdown
* readded to the clientsimulations for Java 12
2022-05-04 18:29:29 +02:00
Dirk Wetter
ac6f99fe1c
correct FFDHE groups
...
... so that they a recognized by ~/utils/hexstream2curves.sh
2022-05-04 17:44:33 +02:00
