#testssl
LightNews LightNews
righettod.eu
📡If you use TestSSL to check the TLS configuration of several services, you may find this set of scripts useful:

github.com/righettod/to...
github.com/righettod/to...

#appsec #appsecurity #tls #testssl
January 18, 2025 at 7:59 PM
testssl.infosec.exchange.ap.brid.gy
The testssl.sh repo resides now under https://github.com/testssl/testssl.sh
GitHub - testssl/testssl.sh: Testing TLS/SSL encryption anywhere on any port
Testing TLS/SSL encryption anywhere on any port . Contribute to testssl/testssl.sh development by creating an account on GitHub.
github.com
January 4, 2025 at 1:51 PM
packetstorm.bsky.social
TestSSL 3.2.4 https://packetstorm.news/files/225817
July 13, 2026 at 10:22 PM
testssl.bsky.social
testssl.sh :verified: @testssl

Some browsers and also #OpenSSL 3.5.0 support already #PQ #KEMs for key exchange to to provide secure key establishment resistance.

The (real soon now) to be released testssl.sh 3.2 final will include handshake simulation, see last column:
April 10, 2025 at 7:31 PM
testssl.bsky.social
Further development now takes place in the 3.3dev branch which was just created

github.com/testssl/test...
GitHub - testssl/testssl.sh: Testing TLS/SSL encryption anywhere on any port
Testing TLS/SSL encryption anywhere on any port . Contribute to testssl/testssl.sh development by creating an account on GitHub.
github.com
June 15, 2025 at 8:23 AM
cpu.xkeyscore.club
I've used github.com/testssl/test... as a replacement for SSLLabs in the past with pretty good results.
github.com
December 3, 2025 at 2:57 PM
testssl.infosec.exchange.ap.brid.gy
Does anybody has a solution for the problem that a #github #action #badge shows also failed actions in a PR?

Help would be much appreciated.

Details here: https://github.com/testssl/testssl.sh/issues/2794

Boosts appreciated
[Help requested] Only current branch for CI badge · Issue #2794 · testssl/testssl.sh
The file Readme.md displays a couple of badges. There are two badges for Github actions. Unfortunately both reflect the status of everything, i.e. also failed actions in PRs. So that a visitor gets...
github.com
June 11, 2025 at 5:25 PM
it-connect.bsky.social
🛡️ Auditez la sécurité SSL/TLS de vos serveurs web avec testssl sh

La sécurité des échanges sur le web repose en grande partie sur la robustesse des protocoles de chiffrement utilisés.
‍
📰 www.it-connect.fr/testsslsh-au...

#SSL #TLS #Elearning #Adminsys
February 14, 2026 at 8:00 AM
testssl.bsky.social
New release for the stable branch 3.2

github.com/testssl/test...
There was parsing issue in HTTP Age header which looked on the first glance security relevant. Closer look revealed it's just a type confusion. But it's still recommended to update. Also this release includes a FAQ. More important details below. What's Changed Add README DeepWiki Link by @HarrisonTCodes Modify grading for incomplete chain. by @secinto Add sectigo CA E46 and R46 for Linux.pem by @drwetter Improve error message for sockets fail and Alpine by @drwetter Make code2network() faster by using bash instead of tr by @drwetter Fix not working --disable-rating switch by @drwetter feat: bump ssllabs rating guide to 2009r by @magnuslarsen For Mac: use homebrew's openssl when necessary+needed by @drwetter Fix displayed message when IPv6 needs to be tested too by @drwetter FAQ for 3.2 by @drwetter in #2881 Fix garbled screen when HTTP Age is not a non-negative int (branch 3.2) by @drwetter Fix indentation @ Intermediate cert validity (3.2) by @drwetter Lucky13: improve phrasing for 3.2 by @drwetter Bump version (3.2) by @drwetter in #2890 New Contributors @HarrisonTCodes made their first contribution in #2801 @secinto made their first contribution in #2798 Full Changelog: v3.2.1...v3.2.2
September 18, 2025 at 7:08 PM
testssl.infosec.exchange.ap.brid.gy
RE: https://infosec.exchange/@testssl/116907554140004771

Ok, here are security bug fix releases

* 3.2.4. https://github.com/testssl/testssl.sh/releases/tag/v3.2.4
* 3.3dev-snapshot-2607 https://github.com/testssl/testssl.sh/releases/tag/v3.3dev-snapshot-2607

Please update
testssl.infosec.exchange.ap.brid.gy testssl.sh :verified: @testssl.infosec.exchange.ap.brid.gy · Jul 12
Attention: There was a #xss #vulnerability in testssl.sh .

XSS payloads can end up unfiltered in the HTML output file of testssl.sh . Affected is the Location HTTP header where outputs were not sanitized properly.

It is advised to upgrade 3.2 and 3.3dev from github. For the first, expect a bug […]
Original post on infosec.exchange
infosec.exchange
July 12, 2026 at 6:55 PM
tom-doerr.bsky.social
https://github.com/testssl/testssl.sh
October 15, 2025 at 3:39 PM
testssl.bsky.social
On friday the (bugfixed) version 3.2.1 of testssl.sh was released

Get it from here: github.com/testssl/test...

🚀
June 15, 2025 at 8:21 AM
testssl.bsky.social
The last release of testssl.sh in the 3.0.10 branch was just created which includes several bugfixes.

Get it from here: github.com/testssl/test...
June 15, 2025 at 8:17 AM
testssl.bsky.social
testssl.sh 3.2.0 is finally out, see github.com/testssl/test... or just testssl.sh .

Changelog see github.com/testssl/test...
/bin/bash based SSL/TLS tester: testssl.sh
TLS/SSL security testing with Open Source Software
testssl.sh
April 23, 2025 at 11:59 AM
testssl.bsky.social
The supplied #openssl binary (Linux 64Bit) for testssl.sh was updated + uploaded here: testssl.sh/openssl-1.0..... Repo with sources: github.com/testssl/open...

Testing before it'll be merged to github would be appreciated.

If you find issues please report them here: github.com/testssl/test...
testssl.sh
January 29, 2025 at 4:06 PM
testssl.bsky.social
Version 3.2rc4 of testssl.sh is out!

It brings lots of fixes + improvements under the hood. The important new feature is support of some KEMs (key encapsulation mechanism), aka Post Quantum Hybrid Key Agreements - thanks to David.

Get it at github.com/testssl/test... or github.com/testssl/test...
January 24, 2025 at 3:11 PM
what.tf
Ha ba voilà, j'ai la dernière release stable donc la 3.0.9 alors que le score a été introduit dans la 3.2.
github.com/testssl/test...
github.com
March 10, 2025 at 9:45 PM
packetstorm.bsky.social
TestSSL 3.2.3 https://packetstorm.news/files/215502
February 12, 2026 at 8:45 PM
packetstorm.bsky.social
TestSSL 3.2.2 https://packetstorm.news/files/209684
September 19, 2025 at 8:11 PM
packetstorm.bsky.social
TestSSL 3.2.1 https://packetstorm.news/files/204318
July 1, 2025 at 9:09 PM
testssl.infosec.exchange.ap.brid.gy
RE: https://infosec.exchange/@testssl/116794387791641181

merged
testssl.infosec.exchange.ap.brid.gy testssl.sh :verified: @testssl.infosec.exchange.ap.brid.gy · Jun 22
New feature coming in: DNS HTTP Resource Record in testssl.sh 3.3dev

PR https://github.com/testssl/testssl.sh/pull/3047 will be merged by tomorrow.

The dig command from MacOS delivers not the records in clear text but a byte stream. That made it necessary […]

[Original post on infosec.exchange]
DNS HTTPS RR (expt.): yes: 1 . alpn="h3,h2" ipv4hint=104.21.34.154,172.67.205.231 ech=AEX+DQBBRAAgACBmZ5hm4SBIISaPEuHBb16If3PdpXonXf6lc+JEmDSxbgAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::6815:229a,2606:4700:3033::ac43:cde7 Service detected: HTTP Testing protocols via sockets except NPN+ALPN SSLv2 not offered (OK) SSLv3 not offered (OK) TLS 1 not offered TLS 1.1 not offered TLS 1.2 offered (OK) TLS 1.3 offered (OK): final QUIC offered (OK): QUICv1 (h3), as advertised in DNS HTTPS RR NPN/SPDY h2, http/1.1 (advertised) ALPN/HTTP2 h2, http/1.1 (offered)
June 22, 2026 at 4:17 PM
testssl.infosec.exchange.ap.brid.gy
New feature coming in: DNS HTTP Resource Record in testssl.sh 3.3dev

PR https://github.com/testssl/testssl.sh/pull/3047 will be merged by tomorrow.

The dig command from MacOS delivers not the records in clear text but a byte stream. That made it necessary […]

[Original post on infosec.exchange]
DNS HTTPS RR (expt.): yes: 1 . alpn="h3,h2" ipv4hint=104.21.34.154,172.67.205.231 ech=AEX+DQBBRAAgACBmZ5hm4SBIISaPEuHBb16If3PdpXonXf6lc+JEmDSxbgAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3032::6815:229a,2606:4700:3033::ac43:cde7 Service detected: HTTP Testing protocols via sockets except NPN+ALPN SSLv2 not offered (OK) SSLv3 not offered (OK) TLS 1 not offered TLS 1.1 not offered TLS 1.2 offered (OK) TLS 1.3 offered (OK): final QUIC offered (OK): QUICv1 (h3), as advertised in DNS HTTPS RR NPN/SPDY h2, http/1.1 (advertised) ALPN/HTTP2 h2, http/1.1 (offered)
June 22, 2026 at 3:09 PM
testssl.infosec.exchange.ap.brid.gy
Also, it was time to release a snapshot of the 3.3dev branch which stabilized well enough and has a good set of features to be released.

https://github.com/testssl/testssl.sh/releases/tag/v3.3dev-snapshot-2602

Enjoy && eat the meal while it's hot ;-)
See https://github.com/testssl/testssl.sh/releases/tag/v3.3dev-snapshot-2602
February 13, 2026 at 1:14 PM
testssl.infosec.exchange.ap.brid.gy
Smal version bump: 3.2.3 for the old branch of testssl.sh was just released

https://github.com/testssl/testssl.sh/releases/tag/v3.2.3

Get it while it's hot ;-)
February 12, 2026 at 12:43 PM