Updates as TL;DR
- Fix potential injection issues @ $NODE, $PROXY, $XMPP_HOST and $PORT and $dl by providing general validation functions
- Fix a potential format string issue (printf needed '%s')
- remove eMudhra certificates by updating Linux, Mozilla and Java CA store
- Several improvements which shellcheck labeled as warning, in the code and as a GH runner for all future occurrences
- Be more patient wrt to TLS 1.3 session ticket to arrive
- Support using LibreSSL for X25519MLKEM768 (LibreSSL 4.3.0)
- Support draft-rosomakho-tls-ecdhe-mlkem512
- Improve starttls_io()
- base docker image updates to supported version
- Added perl code (for GHA) analysis and cleanup work and modernizing on perl-based GH runners
- Added semantics check for testssl.sh in GHA
- How UTC offset so that the user gets less confused about his/her/.. present ;-)
- Improve handling of short-lived certificates
What's Changed
- Fix broken OpenSSL version check for IPv6 proxy in check_proxy() (#3095) by @ericcgu in #3096
- Fix bogus "Scan interrupted" scanTime in mass-testing JSON (#1246) by @ericcgu in #3103
- Improve handling of short-lived certificates (#3097) by @ericcgu in #3104
- Remove warning message when supplying a fname by @drwetter in #3108
- Fix typo by @dcooper16 in #3117
- Support SLH-DSA server keys by @dcooper16 in #3120
- Cleanup #3120 by @dcooper16 in #3123
- CA store update 2608 by @drwetter in #3125
- Declare jsonID by @dcooper16 in #3129
- Show the UTC offset in the start and done banner by @ChrisJr404 in #3126
- Add Perl static analysis by @drwetter in #3131
- Fix error which prohibited passing an equal sign after "--socket-timeout" by @drwetter in #3133
- Fix Shellcheck SC2076 by @dcooper16 in #3140
- Fix Shellcheck SC2125 by @dcooper16 in #3137
- Fix Shellcheck SC2021 by @dcooper16 in #3138
- Rewrite emphasize_stuff_in_headers() by @dcooper16 in #3145
- Avoid use of color functions by @dcooper16 in #3144
- Fix some Shellcheck issues by @dcooper16 in #3149
- Declare local variables by @dcooper16 in #3151
- Fix Shellcheck SC2015 by @dcooper16 in #3152
- Fix Shellcheck SC2313 by @dcooper16 in #3153
- Improve emphasize_stuff_in_headers() by @dcooper16 in #3160
- No command line warnings on display only by @dcooper16 in #3156
- Support draft-rosomakho-tls-ecdhe-mlkem512 by @dcooper16 in #3161
- Declare more local variables by @dcooper16 in #3159
- Fix Shellcheck SC2027 by @dcooper16 in #3158
- Docker baseimageupdate by @drwetter in #3163
- Fix starttls_io() by @drwetter in #3166
- Support using LibreSSL for X25519MLKEM768 by @dcooper16 in #3168
- Fix ldap_get() by @dcooper16 in #3172
- Catch up the update of ca_hashes.txt by @drwetter in #3179
- Fix spki hashgeneration check in t/05_ca_hashes_up_to_date.t by @drwetter in #3183
- Wait for the TLS 1.3 session ticket before closing s_client's stdin by @jvilhuber in #3175
- Fix Shellcheck issue SC2154 in client-initiated renegotiation check by @Sharawey74 in #3190
- Update 3 CA stores to reflect eMudhra "problem" by @drwetter in #3193
- GHA shellcheck update by @drwetter in #3196
- docs: explain JSON and CSV result fields and severity by @rylena in #3199
- GHA Improvements to spot error(s): show diff only by @drwetter in #3198
New Contributors
- @ChrisJr404 made their first contribution in #3126
- @rylena made their first contribution in #3199
Full Changelog: v3.3dev-snapshot-2607...v3.3dev-snapshot-2611