testssl.sh :verified:
LightNews LightNews
testssl.infosec.exchange.ap.brid.gy
testssl.sh :verified:
@testssl.infosec.exchange.ap.brid.gy
3 followers 0 following 44 posts
Fled from the birdsite to a separate account.

Toots mostly in EN about testssl.sh and related stuff.

[bridged from https://infosec.exchange/@testssl on the fediverse by https://fed.brid.gy/ ]
Posts Replies Media Videos
testssl.infosec.exchange.ap.brid.gy
testssl.sh 3.3dev update:
- shellcheck ensures better code quality when check in, thanks to MFTabriz
- flag --rating only does the bare minimum of checks for SSLlabs rating, thanks to magnuslarsen

Both branches had some CA stores update
November 13, 2025 at 7:08 AM
testssl.infosec.exchange.ap.brid.gy
testssl.sh 3.3dev now has (finally) early data support a.k.a 0-RTT .
October 9, 2025 at 6:38 PM
testssl.infosec.exchange.ap.brid.gy
Btw: the new server for testssl.sh also supports #quic and other nice smaller bells and whistles
October 8, 2025 at 10:25 PM
Reposted by testssl.sh :verified:
OpenSSL 3.6 Officially Released with LMS Signature Verification Support, More
OpenSSL 3.6 is now available for download as a major update to this open-source software library that provides secure communications over computer networks for applications and websites. The post OpenSSL 3.6 Officially Released with LMS Signature Verification Support, More appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.
9to5linux.com
October 1, 2025 at 1:28 PM
Reposted by testssl.sh :verified:
testssl.infosec.exchange.ap.brid.gy
Willing to help? See https://github.com/testssl/testssl.sh/issues/2908

I am curious whether Apple finally made a step toward #pqc to catch up with all other major browser vendors with the release of version 26 of their operating systems. They lag behind since months:

#tls
Handshake simulation of testssl.sh which shows that all major browsers have sent a so called hybrid KEM (X25519MLKEM768) during the TLS ClientHello
October 1, 2025 at 1:34 PM
testssl.infosec.exchange.ap.brid.gy
Willing to help? See https://github.com/testssl/testssl.sh/issues/2908

I am curious whether Apple finally made a step toward #pqc to catch up with all other major browser vendors with the release of version 26 of their operating systems. They lag behind since months:

#tls
Handshake simulation of testssl.sh which shows that all major browsers have sent a so called hybrid KEM (X25519MLKEM768) during the TLS ClientHello
October 1, 2025 at 1:34 PM
testssl.infosec.exchange.ap.brid.gy
New release for the stable version.
Some changes in branch 3.2. There was parsing issue in HTTP Age header which looked on the first glance security relevant. Closer look revealed it's just a type confusion. But it's still recommended to update. Also this release includes a FAQ. More important details below. What's Changed Add README DeepWiki Link by @HarrisonTCodes Modify grading for incomplete chain. by @secinto Add sectigo CA E46 and R46 for Linux.pem by @drwetter Improve error message for sockets fail and Alpine by @drwetter Make code2network() faster by using bash instead of tr by @drwetter Fix not working --disable-rating switch by @drwetter feat: bump ssllabs rating guide to 2009r by @magnuslarsen For Mac: use homebrew's openssl when necessary+needed by @drwetter Fix displayed message when IPv6 needs to be tested too by @drwetter FAQ for 3.2 by @drwetter in #2881 Fix garbled screen when HTTP Age is not a non-negative int (branch 3.2) by @drwetter Fix indentation @ Intermediate cert validity (3.2) by @drwetter Lucky13: improve phrasing for 3.2 by @drwetter Bump version (3.2) by @drwetter in #2890 New Contributors @HarrisonTCodes made their first contribution in #2801 @secinto made their first contribution in #2798 Full Changelog: v3.2.1...v3.2.2
September 18, 2025 at 7:04 PM
testssl.infosec.exchange.ap.brid.gy
testssl.sh now also has an FAQ: https://github.com/testssl/testssl.sh/blob/3.3dev/FAQ.md
testssl.sh/FAQ.md at 3.3dev · testssl/testssl.sh
Testing TLS/SSL encryption anywhere on any port . Contribute to testssl/testssl.sh development by creating an account on GitHub.
github.com
September 2, 2025 at 1:50 PM
testssl.infosec.exchange.ap.brid.gy
Don't know whether anybody of you guys uses #apple Mail but I'd rather be careful:

https://www.linkedin.com/feed/update/urn:li:activity:7349803754226868224/

TL;DR: UI prefers #starttls over #tls for #imap (but actually for some reason uses both ports). Apple Product Security doesn't see a […]
Original post on infosec.exchange
infosec.exchange
August 1, 2025 at 2:24 PM
testssl.infosec.exchange.ap.brid.gy
testssl.sh 3.3dev got a bit snappier, most notably for Macs:

#tls #ssl #pentesting
Pic shows a protocol scan of testssl.net taking 8 seconds Pic shows a protocol scan of testssl.net taking 13 seconds
July 31, 2025 at 7:20 AM
testssl.infosec.exchange.ap.brid.gy
If you didn't know: #ipv6 works for testssl.sh since an eternity. For historical reasons it needs to be enabled via "-6" on the command line or "HAS_IPv6=true" in your environment.

The leftover / historical reason is an large error message when users don't have a fully working connectivity […]
Original post on infosec.exchange
infosec.exchange
July 16, 2025 at 8:17 AM
testssl.infosec.exchange.ap.brid.gy
testssl.sh makes it easier now for also for MacOS users to run a #quic protocol test -- if you have #openssl from e.g. #homebrew installed.

It automagically uses that one for testing QUIC then, in 3.3dev.
July 16, 2025 at 7:58 AM
testssl.infosec.exchange.ap.brid.gy
PR for #opossum vulnerability pending in testssl.sh 3.3dev:

https://github.com/testssl/testssl.sh/pull/2838

@hanno
Picture show vulnerability scans for opossum , one just a single scan with --opossum, one with -U
July 11, 2025 at 11:34 AM
testssl.infosec.exchange.ap.brid.gy
For all folks who are into rating to see how good the TLS setup is:

testssl.sh re-adjusted/bumped in stable (3.2) and 3.3dev the #ssllabs rating guide to 2009r --thanks to magnuslarsen 👍
July 10, 2025 at 9:25 AM
testssl.infosec.exchange.ap.brid.gy
Any expert / kind of for CI badges at github?

https://github.com/testssl/testssl.sh/issues/2794

Reboosting may help
[Help requested] Only current branch for CI badge · Issue #2794 · testssl/testssl.sh
The file Readme.md displays a couple of badges. There are two badges for Github actions. Unfortunately both reflect the status of everything, i.e. also failed actions in PRs. So that a visitor gets...
github.com
July 4, 2025 at 2:28 PM
testssl.infosec.exchange.ap.brid.gy
First draft for #quic test is there as a PR for 3.3dev
Pic shows a scan where a QUIC row appears below TLS 1.3 This shows a pic in which QUIC seems not supported by OpenSSL
July 3, 2025 at 1:10 PM
testssl.infosec.exchange.ap.brid.gy
Further development now takes place in the 3.3dev branch which was just created

https://github.com/testssl/testssl.sh/tree/3.3dev
GitHub - testssl/testssl.sh: Testing TLS/SSL encryption anywhere on any port
Testing TLS/SSL encryption anywhere on any port . Contribute to testssl/testssl.sh development by creating an account on GitHub.
github.com
June 15, 2025 at 8:25 AM
testssl.infosec.exchange.ap.brid.gy
(bugfix) version 3.2.1 of testssl.sh is out

Get it from here: https://github.com/testssl/testssl.sh/releases/tag/v3.2.1

🚀
Release Version 3.2.1 (bugfix) · testssl/testssl.sh
What's Changed Several # of improvements for/refactoring Dockerfiles (@polarathene ) Add Android15 handshake simulation by @drwetter Fix missing line feed in run_breach() failure output by @vinny-...
github.com
June 13, 2025 at 8:43 AM
testssl.infosec.exchange.ap.brid.gy
Does anybody has a solution for the problem that a #github #action #badge shows also failed actions in a PR?

Help would be much appreciated.

Details here: https://github.com/testssl/testssl.sh/issues/2794

Boosts appreciated
[Help requested] Only current branch for CI badge · Issue #2794 · testssl/testssl.sh
The file Readme.md displays a couple of badges. There are two badges for Github actions. Unfortunately both reflect the status of everything, i.e. also failed actions in PRs. So that a visitor gets...
github.com
June 11, 2025 at 5:25 PM
Reposted by testssl.sh :verified:
bagder.mastodon.social.ap.brid.gy
the single best resource for Open Source CRA info is this repo: https://github.com/orcwg/cra-hub
GitHub - orcwg/cra-hub: Everything you ever wanted to know about the CRA and its implementation
Everything you ever wanted to know about the CRA and its implementation - orcwg/cra-hub
github.com
May 27, 2025 at 3:26 PM
testssl.infosec.exchange.ap.brid.gy
I have some questions...
May 26, 2025 at 8:41 PM
testssl.infosec.exchange.ap.brid.gy
Branch 3.2 has now also a github action running under MacOS which permits dealing with compatibility issue in the very beginning, i.e. when write a PR

And it has more badges now ;-) -- including the status of the Ubuntu and MacOS CI runner.
Badges in the Readme @ github, including the Github runners for Ubuntu and MacOS
May 20, 2025 at 4:10 PM
testssl.infosec.exchange.ap.brid.gy
Can someone assist writing a unit test for #github using a MacOS runner?

https://github.com/testssl/testssl.sh/issues/2308#issuecomment-2862482574

RTs welcome
Looks like the MacOS 14 runner is free: https://github.com/orgs/community/discussions/102846 for public repos. Can somebody test a github runner for this repo? Currently our Ubuntu runner with perl is here: https://github.com/testssl/testssl.sh/blob/3.2/.github/workflows/unit_tests.yml . Just one check with testssl.sh would suffice. It doesn't have to be perl. Anything which works is fine.
May 8, 2025 at 11:30 AM
testssl.infosec.exchange.ap.brid.gy
testssl.sh 3.2.0 is out, see https://github.com/testssl/testssl.sh/releases/tag/v3.2.0 or https:// just testssl.sh .

Changelog see https://github.com/testssl/testssl.sh/blob/3.2/CHANGELOG.md .
Release Final version 3.2.0 · testssl/testssl.sh
This is the final version 3.2.0 of testssl.sh which brings tons of new features over 3.0. For details see the change log. There will be soon one last bugfix release for the 3.0 branch before it'll ...
github.com
April 23, 2025 at 10:30 AM
testssl.infosec.exchange.ap.brid.gy
Some browsers and also #openssl 3.5.0 support already #pq #kems for key exchange to to provide secure key establishment resistance.

The (real soon now) to be released testssl.sh 3.2 final will include handshake simulation, see last column:
April 10, 2025 at 8:14 AM