TL;DR
- Fix potential injection issues @ $NODE, $PROXY, $XMPP_HOST and $PORT and $dl by providing general validation functions
- Fix a potential format string issue (printf needed '%s')
- remove eMudhra certificates by updating Linux, Mozilla and Java CA store
- base docker image updates to supported version
- Improve handling of short-lived certificates
- Be more patient wrt TLS 1.3 session ticket to arrive
What's Changed
- Fix broken OpenSSL version check for IPv6 proxy in check_proxy() (#3095) [3.2] by @ericcgu in #3101
- Improve handling of short-lived certificates (#3097) [3.2 backport] by @ericcgu in #3106
- Fix timestamp date when --logfile is a dir and other cases by @drwetter in #3124
- CA store update 2026/08 (3.2) by @drwetter in #3127
- Declare jsonID by @dcooper16 in #3130
- Avoid use of color functions and fix SC2021 and SC2171 by @dcooper16 in #3146
- Introduce early warning function (3.2) by @drwetter in #3147
- Fix some Shellcheck issues by @dcooper16 in #3150
- Declare local variables by @dcooper16 in #3155
- No command line warnings on display only by @dcooper16 in #3157
- Docker baseimageupdate 3.2 by @drwetter in #3164
- Fix starttls_io() in 3.2 by @drwetter in #3167
- Update of macOS runners as GH will soon deprecate MacOS 14 by @drwetter in #3170
- Fix spki hashgeneration check in t/05_ca_hashes_up_to_date.t (3.2) by @drwetter in #3184
- Wait for the TLS 1.3 session ticket before closing s_client's stdin by @jvilhuber in #3188
- Update 3 CA stores to reflect eMudhra "problem" (3.2) by @drwetter in #3194
- [3.2] Fix Shellcheck issue SC2154 in client-initiated renegotiation check by @Sharawey74 in #3195
- Validate $NODE, $PROXY, $XMPP_HOST and $PORT (3.2) by @drwetter in #3202
Full Changelog: v3.2.4...v3.2.5