| Port details |
- testssl.sh Analyze and report TLS/SSL configuration/misconfiguration
- 3.0.8_1 security
 =6      3.0.8Version of this port present on the latest quarterly branch. - Maintainer: adamw@FreeBSD.org
- Port Added: 2017-06-30 15:16:09
- Last Update: 2024-01-10 15:29:49
- Commit Hash: e4610fc
- People watching this port, also watch:: sudo, tmux, smartmontools, pkg, lsof
- License: GPLv2
- WWW:
- https://github.com/drwetter/testssl.sh
- Description:
- testssl.sh is a command line tool which checks a server's service on
any port for the support of TLS/SSL ciphers, protocols as well as some
cryptographic flaws. Key features:
- Clear output: you can tell easily whether anything is good or bad
- Machine readable output (CSV, two JSON formats)
- Flexibility: You can test any SSL/TLS enabled and STARTTLS service,
not only webservers at port 443
- Toolbox: Several command line options help you to run your test and
configure your output
- Reliability: features are tested thoroughly
- Privacy: It's only you who sees the result, not a third party
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- testssl.sh>0:security/testssl.sh
- To install the port:
- cd /usr/ports/security/testssl.sh/ && make install clean
- To add the package, run one of these commands:
- pkg install security/testssl.sh
- pkg install testssl.sh
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: testssl.sh
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1664409825
SHA256 (drwetter-testssl.sh-v3.0.8_GH0.tar.gz) = 22c5dc6dfc7500db94b6f8a48775f72b5149d0a372b8552ed7666016ee79edf0
SIZE (drwetter-testssl.sh-v3.0.8_GH0.tar.gz) = 9372229
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Test dependencies:
-
- p5-JSON>=0 : converters/p5-JSON
- perl5>=5.36<5.37 : lang/perl5.36
- Runtime dependencies:
-
- openssl-unsafe>=1.0.1 : security/openssl-unsafe
- bash : shells/bash
- There are no ports dependent upon this port
Configuration Options:- No options to configure
- Options name:
- security_testssl.sh
- USES:
- perl5 shebangfix
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
3.0.8_1
10 Jan 2024 15:29:49
 |
Baptiste Daroussin (bapt) |
MAN?PREFIX: eleminate its usage and move man to share/man |
3.0.8
29 Sep 2022 00:08:09
|
Adam Weinberger (adamw) |
security/testssl.sh: Update to 3.0.8
Changes:
Fix grep 3.8 warnings on fgrep and unneeded escapes of hyphen, slash, space
(Geert)
Fix alignment for cipher output (David)
News binaries (Darwin from Barry), carry now the appendix -bad and fixes a
security problem.
Backport from higher OpenSSL version to support xmpp-server
Fix CT (David)
Fix decryption of TLS 1.3 response (David)
Upgrade Dockerfile to Alpine to 3.15
Fix pretty JSON formatting when warning is issued (David)
Update of certificate stores
Major update of client simulation (9 new simulations , >4 removed in default
run)
Fix CRIME output on servers only supporting TLS 1.3 (Tomasz)
Fix censys link
Fix ome handshake problems w $OPENSSL ciphers, extend
determine_optimal_sockets_params() to more
ciphers, fix PROTOS_OFFERED (David)
Relax STARTTLS FTP requirement so that it doesn't require TLS after AUTH
Fix run_server_preference() with no default protocol (David)
Fix getting CRL / NO_SESSION_ID under some circumstances (David)
Improve/fix OpenSSL 3.0 compatibility (David)
Fix formatting to documentation
Add FFDHE groups to supported_groups (David)
Include RSA-PSS in ClientHello (David) |
07 Sep 2022 21:58:51
|
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
3.0.7
07 Sep 2022 21:10:59
|
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above  ) |
3.0.7
19 Feb 2022 20:43:01
|
Adam Weinberger (adamw) |
security/testssl.sh: Update to 3.0.7
Changes:
Fix "ID resumption test failed" bug under Darwin
Fix "locale error message when en_US.UTF-8 isn't available" bug
Fix "Darwin / LibreSSL startup problem" which leads to a question upfront
Make upfront handshake tests more compatible by adding </dev/null (David)
Take 'HTTP Age' HTTP header into account when determine HTTP time (Wahnes)
Fix JSON header (structured JSON output) name (David)
Robustness: Update reset_hostdepended_vars() for mass tests (David)
Simplify determination of git stuff (Matthias)
Fix "newline to spaces" in JSON and CSV findings (David)
Fix "Bad file descriptor with --connect-timeout option"
SSLv2 fixes, OpenSSL fixes 3.X (David)
Improve cipher_pref_check() for detecting prioritization of ChaCha ciphers
Simplify + speed up pre-check
Addressing lame DNS responses on WSL
Fix big serial # issue in certs
Fix invalid JSON when certificate issuer containing non-ASCII chars |
3.0.6
03 Oct 2021 16:53:09
|
Adam Weinberger (adamw) |
security/testssl.sh: Update to 3.0.6 |
3.0.5
10 May 2021 16:42:06
|
Adam Weinberger (adamw) |
security/testssl.sh: Update to 3.0.5 |
3.0.4
07 Apr 2021 08:09:01
|
Mathieu Arnold (mat) |
One more small cleanup, forgotten yesterday.
Reported by: lwhsu |
3.0.4
06 Apr 2021 14:31:07
|
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
3.0.4
22 Nov 2020 15:37:05
 |
adamw |
security/testssl.sh: Update to 3.0.4 |
3.0.3
19 Nov 2020 16:11:53
|
adamw |
security/testssl.sh: Update to 3.0.3
* Update certificate stores
* manpage fix (Karl)
* minor speedups for some vulnerability tests
* bash 5.1 fix
* Secure Client-Initiated Renegotiation false positive fix
* BREACH is now medium
* invalid JSON fix and other JSON improvements (David)
* Adding native Android 7 handshake instead of Chrome which has TLS 1.3
(Christoph)
* Header flag X-XSS-Protection is now labled as INFO
* No cyan colors in HHHTP header flags anymore, colons added
* Dockerfile improvments |
3.0.2
29 Sep 2020 10:10:51
|
adamw |
security/testssl.sh: Turn REINPLACEs into patches
While here, improve some text strings and general formatting. |
3.0.2
29 Sep 2020 09:15:26
|
adamw |
Adopt these ports |
3.0.2
28 Sep 2020 05:05:25
|
tobik |
Reset MAINTAINER |
3.0.2
09 May 2020 04:11:16
|
tobik |
security/testssl.sh: Update to 3.0.2
Changes: https://github.com/drwetter/testssl.sh/releases/tag/3.0.2 |
3.0.1
15 Apr 2020 11:25:28
|
tobik |
security/testssl.sh: Update to 3.0.1
Changes: https://github.com/drwetter/testssl.sh/releases/tag/3.0.1 |
3.0
24 Jan 2020 21:16:35
|
tobik |
security/testssl.sh: Update to 3.0
Changes: https://github.com/drwetter/testssl.sh/releases/tag/3.0 |
3.0.r6
13 Dec 2019 06:02:08
|
tobik |
security/testssl.sh: Update to 3.0rc6
- Hook up tests
Changes: https://github.com/drwetter/testssl.sh/releases/tag/3.0rc6 |
3.0.r5
26 Apr 2019 04:45:50
|
tobik |
security/testssl.sh: Update to 3.0rc5
Changes: https://github.com/drwetter/testssl.sh/releases/tag/3.0rc5 |
3.0.r4
20 Feb 2019 07:43:32
|
tobik |
security/testssl.sh: Update to 3.0rc4
Changes: https://github.com/drwetter/testssl.sh/releases/tag/3.0rc4
MFH: 2019Q1 (bug fixes) |
3.0.r3
01 Dec 2018 09:01:07
|
tobik |
security/testssl.sh: Update to 3.0rc3
Changes: https://github.com/drwetter/testssl.sh/releases/tag/3.0rc3
MFH: 2018Q4 (bugfixes) |
3.0.r2
10 Oct 2018 08:10:51
|
tobik |
security/testssl.sh: Update to 3.0rc2
Changes: https://github.com/drwetter/testssl.sh/releases/tag/3.0rc2
MFH: 2018Q4 (bugfixes) |
3.0.r1
08 Sep 2018 11:33:55
|
tobik |
security/testssl.sh: Update to 3.0rc1 |
2.9.5.5
15 Apr 2018 08:53:35
|
tobik |
security/testssl.sh: Update to 2.9.5-5
Changes: https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5-5 |
2.9.5.4
10 Apr 2018 08:13:16
|
tobik |
security/testssl.sh: Update to 2.9.5-4
Changes: https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5-4 |
2.9.5.3
25 Mar 2018 08:43:20
|
tobik |
security/testssl.sh: Update to 2.9.5-3
Changes: https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5-3 |
2.9.5.2_1
18 Mar 2018 09:02:42
|
tobik |
security/testssl.sh: Fix certificate expiration check
Upstream commit af6ca18933ffc5bb02d2ced46342b8d7a6275acd dropped the
TZ offset from the certificate enddate but the FreeBSD date format was
not updated accordingly. Remove the unnecessary %z from the format
string.
- While here add NO_ARCH
PR: 226676
Submitted by: Piotr Kubaj <pkubaj@anongoth.pl> |
2.9.5.2
15 Mar 2018 11:18:04
|
tobik |
security/testssl.sh: Update to 2.9.5-2
PR: 226422
Submitted by: Piotr Kubaj <pkubaj@anongoth.pl> |
2.9.5.1_1
06 Nov 2017 20:33:12
|
tobik |
security/testssl.sh: Use security/openssl-unsafe
This greatly simplifies the port and we can stop building our own
unsafe openssl version.
PR: 223457
Submitted by: brnrd |
2.9.5.1
21 Sep 2017 09:24:20
|
tobik |
security/testssl.sh: Update to 2.9.5-1
Changes: https://github.com/drwetter/testssl.sh/compare/v2.9.5...v2.9.5-1 |
2.9.5
20 Sep 2017 09:27:26
|
tobik |
security/testssl.sh: Update to 2.9.5
Changes: https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5 |
2.8_1
05 Jul 2017 07:53:45
|
tobik |
Only use enable-ec_nistp_64_gcc_128 on amd64 since it requires a
64-bit little-endian architecture and fix the build on !amd64
ecp_nistp224.c:43:9: error: unknown type name '__uint128_t'
typedef __uint128_t uint128_t; /* nonstandard; implemented by gcc on 64-bit
^
PR: 220403
Reported by: dewayne@heuristicsystems.com.au
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D11436
MFH: 2017Q3 |
2.8
30 Jun 2017 15:15:59
|
tobik |
New port: security/testssl.sh
testssl.sh is a command line tool which checks a server's service on
any port for the support of TLS/SSL ciphers, protocols as well as some
cryptographic flaws. Key features:
- Clear output: you can tell easily whether anything is good or bad
- Flexibility: You can test any SSL/TLS enabled and STARTTLS service,
not only webservers at port 443
- Toolbox: Several command line options help you to run YOUR test and
configure YOUR output
- Reliability: features are tested thoroughly
- Verbosity: If a particular check cannot be performed because of a
missing capability on your client side, you'll get a warning
- Privacy: It's only you who sees the result, not a third party
WWW: https://github.com/drwetter/testssl.sh
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D11406 |
As an Amazon Associate I earn from qualifying purchases.