- Peter Mosmans
- started way better cmd line parsing
- cleanups, fixes
- openssl sources support with the "missing" features
- John Newbigin
- Proxy support (sockets and openssl)
- Jonathan Roach
- TLS_FALLBACK_SCSV checks
- Mark Felder
- lots of cleanups
- Shellcheck static analysis
- Frank Breedijk
- Detection of insecure redirects
- JSON and CSV output
- CA pinning
- Client simulations
- CI integration, some test cases for it
- David Cooper
- Detection + output of multiple certificates
- several cleanups of server certificate related stuff
- extended parsing of TLS ServerHello messages
- testssl.sh -e/-E: testing with a mixture of openssl + sockets
- finding more TLS extensions via sockets
- extensive CN+SAN <--> hostname check
- seperate check for curves
- RFC 7919, key shares extension
- parallel mass testing!
- numerous fixes
-
Thomas Patzke:
- Support of supplying timeout value for openssl connect
-
Oleksandr Nosenko
- non-flat JSON support (--json-pretty)
- in file output (CSV, JSON flat, JSON non-flat) support of a minimum severity level
- Christoph Badura
- NetBSD fixes
- Jean Marsault
- client auth: ideas, code snipplets
-
Maciej Grela
- colorless handling
-
Olivier Paroz
- conversion xxd --> hexdump stuff
-
@typingArtist
- improved BEAST detection
-
@f-s
- ARM binary support
-
Jeroen Wiert Pluimers
- Darwin binaries support
-
Julien Vehent
- supplied 1st Darwin binary
- Rechi
- initial MX stuff
- fixes
- Laine Gholson
- avahi/mDNS support
- HTTP2/ALPN
- bugfixes
- former ARM binary support
- Дилян Палаузов
- bug fix for 3des report
- reported a tricky STARTTLS bug
- Viktor Szépe
- color function maker
-
Thomas Martens
- colorblind
- no-rfc mapping
-
Jonathon Rossi
- fix for bash3 (Darwin)
- and other Darwin fixes
-
@nvsofts (NV)
- LibreSSL patch for GOST
- Markus Manzke
- Fix for HSTS + subdomains
- LibreSSL patch
- Dmitri S
- inspiration & help for Darwin port
Others I forgot to mention which did give me feedback, bug reports and helped one way or another.
-
OpenSSL team for providing openssl.
-
Ivan Ristic/Qualys for the liberal license which made it possible to use the client data
-
My family for supporting me doing this work