File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 88* Remove "negotiated cipher / protocol"
99* Provide a better verdict wrt to server order: Now per protocol and ciphers are weighted for each protocol
1010* Switched to multi-stage docker image with opensuse base to avoid musl libc issues, performance gain also
11- * Improved compatibility with OpenSSL 3.0
11+ * Improved compatibility with OpenSSL 3.0 and higher versions
1212* Improved compatibility with Open/LibreSSL versions not supporting TLS 1.0-1.1 anymore
1313* Renamed PFS/perfect forward secrecy --> FS/forward secrecy
1414* Cipher list straightening
3535* Wildcard certificates: detection and warning
3636* TLS 1.2 and TLS 1.3 sig algs added
3737* Check for ffdhe groups
38- * Check for three KEMs in draft-kwiatkowski-tls-ecdhe-mlkem/draft-tls-westerbaan-xyber768d00
38+ * Check for six KEMs in draft-connolly-tls-mlkem-key-agreement/ draft-kwiatkowski-tls-ecdhe-mlkem/draft-tls-westerbaan-xyber768d00
3939* Show server supported signature algorithms
4040* --add-ca can also now be a directory with \* .pem files
4141* Warning of 398 day limit for certificates issued after 2020/9/1
Original file line number Diff line number Diff line change @@ -33,7 +33,7 @@ Full contribution, see git log.
3333 - RFC 8879, certificate compression
3434 - 128 cipher limit, padding
3535 - compatibility for LibreSSL and different OpenSSL versions
36- - Check for ffdhe groups
36+ - Check for ffdhe and ML-KEM groups
3737 - TLS 1.2 and TLS 1.3 sig algs added
3838 - Show server supported signature algorithms
3939 - Show supported certification authorities sent by the server when client auth is requested
You can’t perform that action at this time.
0 commit comments