Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sslscan for openSUSE:Factory checked in at 2023-09-20 13:25:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sslscan (Old) and /work/SRC/openSUSE:Factory/.sslscan.new.16627 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sslscan" Wed Sep 20 13:25:30 2023 rev:14 rq:1111744 version:2.1.0 Changes: -------- --- /work/SRC/openSUSE:Factory/sslscan/sslscan.changes 2023-04-17 17:41:30.990297708 +0200 +++ /work/SRC/openSUSE:Factory/.sslscan.new.16627/sslscan.changes 2023-09-20 13:27:10.250306004 +0200 @@ -1,0 +2,6 @@ +Thu Sep 14 12:41:24 UTC 2023 - Andrea Manzini <[email protected]> + +- update to 2.1.0: + * Build against OpenSSL 3.0 instead of 1.1.0 (credit jtesta) + +------------------------------------------------------------------- Old: ---- sslscan-2.0.16.tar.gz New: ---- sslscan-2.1.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sslscan.spec ++++++ --- /var/tmp/diff_new_pack.E5ZE9t/_old 2023-09-20 13:27:11.274342691 +0200 +++ /var/tmp/diff_new_pack.E5ZE9t/_new 2023-09-20 13:27:11.274342691 +0200 @@ -17,7 +17,7 @@ Name: sslscan -Version: 2.0.16 +Version: 2.1.0 Release: 0 Summary: SSL cipher scanning tool License: SUSE-GPL-3.0+-with-openssl-exception @@ -27,7 +27,7 @@ #Patches copied from Debian package Patch1: fedora-sslscan-patents.patch BuildRequires: pkgconfig -BuildRequires: pkgconfig(libssl) >= 1.1.1 +BuildRequires: pkgconfig(libssl) >= 3.0 %description SSLScan determines what ciphers are supported on SSL-based services, ++++++ sslscan-2.0.16.tar.gz -> sslscan-2.1.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/Changelog new/sslscan-2.1.0/Changelog --- old/sslscan-2.0.16/Changelog 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/Changelog 2023-09-05 15:54:34.000000000 +0200 @@ -1,5 +1,12 @@ Changelog ========= +Version: 2.1.0 +Date : 05/09/2023 +Author : rbsec <[email protected]> +Changes: The following are a list of changes + > Build against OpenSSL 3.0 instead of 1.1.0 (credit jtesta) + > Improve CPU detection on OSX (tetlowgm) + Version: 2.0.16 Date : 08/04/2023 Author : rbsec <[email protected]> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/Makefile new/sslscan-2.1.0/Makefile --- old/sslscan-2.0.16/Makefile 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/Makefile 2023-09-05 15:54:34.000000000 +0200 @@ -86,7 +86,9 @@ ifneq (,$(wildcard /usr/bin/nproc)) NUM_PROCS = `/usr/bin/nproc --all` endif - +ifeq ($(OS), Darwin) + NUM_PROCS = `sysctl -n hw.ncpu` +endif .PHONY: all sslscan clean install uninstall static opensslpull @@ -127,9 +129,9 @@ true opensslpull: if [ -d openssl -a -d openssl/.git ]; then \ - cd ./openssl && git checkout OpenSSL_1_1_1-stable && git pull | grep -q "Already up-to-date." && [ -e ../.openssl.is.fresh ] || touch ../.openssl.is.fresh ; \ + cd ./openssl && git checkout `git ls-remote https://github.com/openssl/openssl | grep -Eo '(openssl-3\.0\.[0-9]+)' | sort --version-sort | tail -n 1` && git pull | grep -q "Already up-to-date." && [ -e ../.openssl.is.fresh ] || touch ../.openssl.is.fresh ; \ else \ - git clone --depth 1 -b OpenSSL_1_1_1-stable https://github.com/openssl/openssl ./openssl && cd ./openssl && touch ../.openssl.is.fresh ; \ + git clone --depth 1 -b `git ls-remote https://github.com/openssl/openssl | grep -Eo '(openssl-3\.0\.[0-9]+)' | sort --version-sort | tail -n 1` https://github.com/openssl/openssl ./openssl && cd ./openssl && touch ../.openssl.is.fresh ; \ fi # Need to build OpenSSL differently on OSX @@ -149,7 +151,7 @@ openssl/libcrypto.a: openssl/Makefile $(MAKE) -j $(NUM_PROCS) -C openssl depend - $(MAKE) -j $(NUM_PROCS) -C openssl all + $(MAKE) -j $(NUM_PROCS) -C openssl build_libs # $(MAKE) -j $(NUM_PROCS) -C openssl test # Disabled because this takes 45+ minutes for OpenSSL v1.1.1. static: openssl/libcrypto.a diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/Makefile.mingw new/sslscan-2.1.0/Makefile.mingw --- old/sslscan-2.0.16/Makefile.mingw 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/Makefile.mingw 2023-09-05 15:54:34.000000000 +0200 @@ -66,14 +66,14 @@ if [ -d zlib_mingw -a -d zlib_mingw/.git ]; then \ cd ./zlib_mingw && git pull && git checkout tags/`git describe --abbrev=0 --tags` ; \ else \ - git clone --depth 1 https://github.com/madler/zlib ./zlib_mingw && cd ./zlib_mingw && git checkout tags/`git describe --abbrev=0` ; \ + git clone -b master --depth 1 https://github.com/madler/zlib ./zlib_mingw && cd ./zlib_mingw && git checkout tags/`git describe --abbrev=0` ; \ fi opensslpull: if [ -d openssl_mingw -a -d openssl_mingw/.git ]; then \ - cd ./openssl_mingw && git checkout OpenSSL_1_1_1-stable && git pull | grep -q "Already up-to-date." && [ -e ../.openssl_mingw.is.fresh ] || touch ../.openssl_mingw.is.fresh ; \ + cd ./openssl_mingw && git checkout `git ls-remote https://github.com/openssl/openssl | grep -Eo '(openssl-3\.0\.[0-9]+)' | sort --version-sort | tail -n 1` && git pull | grep -q "Already up-to-date." && [ -e ../.openssl_mingw.is.fresh ] || touch ../.openssl_mingw.is.fresh ; \ else \ - git clone --depth 1 -b OpenSSL_1_1_1-stable https://github.com/openssl/openssl ./openssl_mingw && cd ./openssl_mingw && touch ../.openssl_mingw.is.fresh ; \ + git clone --depth 1 -b `git ls-remote https://github.com/openssl/openssl | grep -Eo '(openssl-3\.0\.[0-9]+)' | sort --version-sort | tail -n 1` https://github.com/openssl/openssl ./openssl_mingw && cd ./openssl_mingw && touch ../.openssl_mingw.is.fresh ; \ fi zlib_mingw/libz.a: zlibpull diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/Dockerfile new/sslscan-2.1.0/docker_test/Dockerfile --- old/sslscan-2.0.16/docker_test/Dockerfile 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/Dockerfile 2023-09-05 15:54:34.000000000 +0200 @@ -1,4 +1,4 @@ -FROM ubuntu:18.04 +FROM ubuntu:22.04 # Copy OpenSSL's 'openssl' tools. COPY openssl_prog_v1.0.0 /openssl_v1.0.0/openssl diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_1.txt new/sslscan-2.1.0/docker_test/expected_output/test_1.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_1.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_1.txt 2023-09-05 15:54:34.000000000 +0200 @@ -39,9 +39,7 @@ Accepted TLSv1.2 [32m256[0m bits DHE-RSA-CAMELLIA256-SHA DHE 2048 bits Accepted TLSv1.2 [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted TLSv1.2 [32m128[0m bits DHE-RSA-AES128-SHA DHE 2048 bits -Accepted TLSv1.2 [32m128[0m bits DHE-RSA-SEED-SHA DHE 2048 bits Accepted TLSv1.2 [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE 2048 bits -Accepted TLSv1.2 [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 Accepted TLSv1.2 [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted TLSv1.2 [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE 2048 bits Accepted TLSv1.2 [32m256[0m bits AES256-GCM-SHA384 @@ -51,49 +49,52 @@ Accepted TLSv1.2 [32m256[0m bits AES256-SHA Accepted TLSv1.2 [32m256[0m bits CAMELLIA256-SHA Accepted TLSv1.2 [32m128[0m bits AES128-SHA -Accepted TLSv1.2 [32m128[0m bits SEED-SHA Accepted TLSv1.2 [32m128[0m bits CAMELLIA128-SHA -Accepted TLSv1.2 [32m128[0m bits [33mRC4-SHA [0m -Accepted TLSv1.2 [32m128[0m bits [33mRC4-MD5 [0m Accepted TLSv1.2 [32m112[0m bits [33mDES-CBC3-SHA [0m +Accepted TLSv1.2 [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted TLSv1.2 [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m +Accepted TLSv1.2 [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA +Accepted TLSv1.2 [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted TLSv1.2 [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted TLSv1.2 [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m [32mPreferred[0m [33mTLSv1.1[0m [32m256[0m bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.1[0m [32m256[0m bits DHE-RSA-AES256-SHA DHE 2048 bits Accepted [33mTLSv1.1[0m [32m256[0m bits DHE-RSA-CAMELLIA256-SHA DHE 2048 bits Accepted [33mTLSv1.1[0m [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.1[0m [32m128[0m bits DHE-RSA-AES128-SHA DHE 2048 bits -Accepted [33mTLSv1.1[0m [32m128[0m bits DHE-RSA-SEED-SHA DHE 2048 bits Accepted [33mTLSv1.1[0m [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE 2048 bits -Accepted [33mTLSv1.1[0m [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.1[0m [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.1[0m [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE 2048 bits Accepted [33mTLSv1.1[0m [32m256[0m bits AES256-SHA Accepted [33mTLSv1.1[0m [32m256[0m bits CAMELLIA256-SHA Accepted [33mTLSv1.1[0m [32m128[0m bits AES128-SHA -Accepted [33mTLSv1.1[0m [32m128[0m bits SEED-SHA Accepted [33mTLSv1.1[0m [32m128[0m bits CAMELLIA128-SHA -Accepted [33mTLSv1.1[0m [32m128[0m bits IDEA-CBC-SHA -Accepted [33mTLSv1.1[0m [32m128[0m bits [33mRC4-SHA [0m -Accepted [33mTLSv1.1[0m [32m128[0m bits [33mRC4-MD5 [0m Accepted [33mTLSv1.1[0m [32m112[0m bits [33mDES-CBC3-SHA [0m +Accepted [33mTLSv1.1[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted [33mTLSv1.1[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m +Accepted [33mTLSv1.1[0m [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA +Accepted [33mTLSv1.1[0m [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.1[0m [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.1[0m [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m [32mPreferred[0m [33mTLSv1.0[0m [32m256[0m bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m256[0m bits DHE-RSA-AES256-SHA DHE 2048 bits Accepted [33mTLSv1.0[0m [32m256[0m bits DHE-RSA-CAMELLIA256-SHA DHE 2048 bits Accepted [33mTLSv1.0[0m [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-AES128-SHA DHE 2048 bits -Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-SEED-SHA DHE 2048 bits Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE 2048 bits -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE 2048 bits Accepted [33mTLSv1.0[0m [32m256[0m bits AES256-SHA Accepted [33mTLSv1.0[0m [32m256[0m bits CAMELLIA256-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits AES128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits SEED-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits CAMELLIA128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits IDEA-CBC-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-SHA [0m -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-MD5 [0m Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDES-CBC3-SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m [1;34mServer Key Exchange Group(s):[0m TLSv1.2 [32m128[0m bits secp256r1 (NIST P-256)[0m diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_12.txt new/sslscan-2.1.0/docker_test/expected_output/test_12.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_12.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_12.txt 2023-09-05 15:54:34.000000000 +0200 @@ -29,22 +29,22 @@ Accepted [33mTLSv1.0[0m [32m256[0m bits DHE-RSA-CAMELLIA256-SHA DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-AES128-SHA DHE [31m512[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-SEED-SHA DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE [31m512[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m256[0m bits AES256-SHA Accepted [33mTLSv1.0[0m [32m256[0m bits CAMELLIA256-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits AES128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits SEED-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits CAMELLIA128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits IDEA-CBC-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-SHA [0m -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-MD5 [0m Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDES-CBC3-SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA Accepted [33mTLSv1.0[0m [31m56[0m bits [33mTLS_RSA_WITH_DES_CBC_SHA [0m Accepted [33mTLSv1.0[0m [31m56[0m bits [33mTLS_DHE_RSA_WITH_DES_CBC_SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m [1;34mServer Key Exchange Group(s):[0m TLSv1.0 [32m128[0m bits secp256r1 (NIST P-256)[0m diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_13.txt new/sslscan-2.1.0/docker_test/expected_output/test_13.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_13.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_13.txt 2023-09-05 15:54:34.000000000 +0200 @@ -27,9 +27,9 @@ TLSv1.0 [32mnot vulnerable[0m to heartbleed [1;34mSupported Server Cipher(s):[0m -[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_GCM_SHA256 Curve [32m25519[0m DHE 253 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_AES_256_GCM_SHA384 Curve [32m25519[0m DHE 253 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_CHACHA20_POLY1305_SHA256 Curve [32m25519[0m DHE 253 +[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits [32mTLS_AES_128_GCM_SHA256 [0m Curve [32m25519[0m DHE 253 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_AES_256_GCM_SHA384 [0m Curve [32m25519[0m DHE 253 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_CHACHA20_POLY1305_SHA256 [0m Curve [32m25519[0m DHE 253 Accepted [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_CCM_SHA256 Curve [32m25519[0m DHE 253 [32mPreferred[0m TLSv1.2 [32m256[0m bits [32mECDHE-RSA-AES256-GCM-SHA384 [0m Curve [32m25519[0m DHE 253 Accepted TLSv1.2 [32m256[0m bits [32mDHE-RSA-AES256-GCM-SHA384 [0m DHE 2048 bits diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_14.txt new/sslscan-2.1.0/docker_test/expected_output/test_14.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_14.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_14.txt 2023-09-05 15:54:34.000000000 +0200 @@ -25,9 +25,9 @@ TLSv1.2 [32mnot vulnerable[0m to heartbleed [1;34mSupported Server Cipher(s):[0m -[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_GCM_SHA256 Curve P-521 DHE 521 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_AES_256_GCM_SHA384 Curve P-521 DHE 521 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_CHACHA20_POLY1305_SHA256 Curve P-521 DHE 521 +[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits [32mTLS_AES_128_GCM_SHA256 [0m Curve P-521 DHE 521 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_AES_256_GCM_SHA384 [0m Curve P-521 DHE 521 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_CHACHA20_POLY1305_SHA256 [0m Curve P-521 DHE 521 Accepted [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_CCM_SHA256 Curve P-521 DHE 521 [32mPreferred[0m TLSv1.2 [32m256[0m bits [32mECDHE-RSA-AES256-GCM-SHA384 [0m Curve P-521 DHE 521 Accepted TLSv1.2 [32m256[0m bits [32mDHE-RSA-AES256-GCM-SHA384 [0m DHE 8192 bits diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_15.txt new/sslscan-2.1.0/docker_test/expected_output/test_15.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_15.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_15.txt 2023-09-05 15:54:34.000000000 +0200 @@ -27,9 +27,9 @@ TLSv1.0 [32mnot vulnerable[0m to heartbleed [1;34mSupported Server Cipher(s):[0m -[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_GCM_SHA256 Curve [32m25519[0m DHE 253 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_AES_256_GCM_SHA384 Curve [32m25519[0m DHE 253 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_CHACHA20_POLY1305_SHA256 Curve [32m25519[0m DHE 253 +[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits [32mTLS_AES_128_GCM_SHA256 [0m Curve [32m25519[0m DHE 253 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_AES_256_GCM_SHA384 [0m Curve [32m25519[0m DHE 253 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_CHACHA20_POLY1305_SHA256 [0m Curve [32m25519[0m DHE 253 Accepted [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_CCM_SHA256 Curve [32m25519[0m DHE 253 [32mPreferred[0m TLSv1.2 [32m256[0m bits [32mECDHE-ECDSA-AES256-GCM-SHA384[0m Curve [32m25519[0m DHE 253 Accepted TLSv1.2 [32m256[0m bits [32mECDHE-ECDSA-CHACHA20-POLY1305[0m Curve [32m25519[0m DHE 253 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_16.txt new/sslscan-2.1.0/docker_test/expected_output/test_16.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_16.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_16.txt 2023-09-05 15:54:34.000000000 +0200 @@ -31,7 +31,6 @@ Accepted TLSv1.2 [32m256[0m bits DHE-RSA-AES256-SHA DHE 2048 bits Accepted TLSv1.2 [32m256[0m bits DHE-RSA-CAMELLIA256-SHA DHE 2048 bits Accepted TLSv1.2 [32m128[0m bits DHE-RSA-AES128-SHA DHE 2048 bits -Accepted TLSv1.2 [32m128[0m bits DHE-RSA-SEED-SHA DHE 2048 bits Accepted TLSv1.2 [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE 2048 bits Accepted TLSv1.2 [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE 2048 bits Accepted TLSv1.2 [32m256[0m bits AES256-GCM-SHA384 @@ -41,11 +40,13 @@ Accepted TLSv1.2 [32m256[0m bits AES256-SHA Accepted TLSv1.2 [32m256[0m bits CAMELLIA256-SHA Accepted TLSv1.2 [32m128[0m bits AES128-SHA -Accepted TLSv1.2 [32m128[0m bits SEED-SHA Accepted TLSv1.2 [32m128[0m bits CAMELLIA128-SHA -Accepted TLSv1.2 [32m128[0m bits [33mRC4-SHA [0m -Accepted TLSv1.2 [32m128[0m bits [33mRC4-MD5 [0m Accepted TLSv1.2 [32m112[0m bits [33mDES-CBC3-SHA [0m +Accepted TLSv1.2 [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted TLSv1.2 [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m +Accepted TLSv1.2 [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA +Accepted TLSv1.2 [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted TLSv1.2 [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA [1;34mServer Key Exchange Group(s):[0m TLSv1.2 [31m81[0m bits [31msect163k1[0m diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_2.txt new/sslscan-2.1.0/docker_test/expected_output/test_2.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_2.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_2.txt 2023-09-05 15:54:34.000000000 +0200 @@ -23,5 +23,9 @@ [1;34mHeartbleed:[0m [1;34mSupported Server Cipher(s):[0m + Unable to parse certificate + Unable to parse certificate + Unable to parse certificate + Unable to parse certificate Certificate information cannot be retrieved. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_3.txt new/sslscan-2.1.0/docker_test/expected_output/test_3.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_3.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_3.txt 2023-09-05 15:54:34.000000000 +0200 @@ -23,5 +23,9 @@ [1;34mHeartbleed:[0m [1;34mSupported Server Cipher(s):[0m + Unable to parse certificate + Unable to parse certificate + Unable to parse certificate + Unable to parse certificate Certificate information cannot be retrieved. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_4.txt new/sslscan-2.1.0/docker_test/expected_output/test_4.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_4.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_4.txt 2023-09-05 15:54:34.000000000 +0200 @@ -27,9 +27,9 @@ TLSv1.0 [32mnot vulnerable[0m to heartbleed [1;34mSupported Server Cipher(s):[0m -[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_GCM_SHA256 Curve [32m25519[0m DHE 253 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_AES_256_GCM_SHA384 Curve [32m25519[0m DHE 253 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_CHACHA20_POLY1305_SHA256 Curve [32m25519[0m DHE 253 +[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits [32mTLS_AES_128_GCM_SHA256 [0m Curve [32m25519[0m DHE 253 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_AES_256_GCM_SHA384 [0m Curve [32m25519[0m DHE 253 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_CHACHA20_POLY1305_SHA256 [0m Curve [32m25519[0m DHE 253 [32mPreferred[0m TLSv1.2 [32m256[0m bits [32mECDHE-RSA-AES256-GCM-SHA384 [0m Curve [32m25519[0m DHE 253 Accepted TLSv1.2 [32m256[0m bits [32mDHE-RSA-AES256-GCM-SHA384 [0m DHE 3072 bits Accepted TLSv1.2 [32m256[0m bits [32mECDHE-RSA-CHACHA20-POLY1305 [0m Curve [32m25519[0m DHE 253 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_5.txt new/sslscan-2.1.0/docker_test/expected_output/test_5.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_5.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_5.txt 2023-09-05 15:54:34.000000000 +0200 @@ -46,15 +46,10 @@ Accepted TLSv1.2 [32m256[0m bits [35mADH-CAMELLIA256-SHA [0m DHE [33m1024[0m bits Accepted TLSv1.2 [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted TLSv1.2 [32m128[0m bits DHE-RSA-AES128-SHA DHE [33m1024[0m bits -Accepted TLSv1.2 [32m128[0m bits DHE-RSA-SEED-SHA DHE [33m1024[0m bits Accepted TLSv1.2 [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE [33m1024[0m bits Accepted TLSv1.2 [32m128[0m bits [35mAECDH-AES128-SHA [0m Curve P-256 DHE 256 Accepted TLSv1.2 [32m128[0m bits [35mADH-AES128-SHA [0m DHE [33m1024[0m bits -Accepted TLSv1.2 [32m128[0m bits [35mADH-SEED-SHA [0m DHE [33m1024[0m bits Accepted TLSv1.2 [32m128[0m bits [35mADH-CAMELLIA128-SHA [0m DHE [33m1024[0m bits -Accepted TLSv1.2 [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 -Accepted TLSv1.2 [32m128[0m bits [35mAECDH-RC4-SHA [0m Curve P-256 DHE 256 -Accepted TLSv1.2 [32m128[0m bits [35mADH-RC4-MD5 [0m DHE [33m1024[0m bits Accepted TLSv1.2 [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted TLSv1.2 [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE [33m1024[0m bits Accepted TLSv1.2 [32m112[0m bits [35mAECDH-DES-CBC3-SHA [0m Curve P-256 DHE 256 @@ -66,17 +61,23 @@ Accepted TLSv1.2 [32m256[0m bits AES256-SHA Accepted TLSv1.2 [32m256[0m bits CAMELLIA256-SHA Accepted TLSv1.2 [32m128[0m bits AES128-SHA -Accepted TLSv1.2 [32m128[0m bits SEED-SHA Accepted TLSv1.2 [32m128[0m bits CAMELLIA128-SHA -Accepted TLSv1.2 [32m128[0m bits [33mRC4-SHA [0m -Accepted TLSv1.2 [32m128[0m bits [33mRC4-MD5 [0m Accepted TLSv1.2 [32m112[0m bits [33mDES-CBC3-SHA [0m Accepted TLSv1.2 [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_RC4_40_MD5[0m +Accepted TLSv1.2 [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted TLSv1.2 [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m Accepted TLSv1.2 [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5[0m +Accepted TLSv1.2 [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA Accepted TLSv1.2 [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_DES40_CBC_SHA[0m Accepted TLSv1.2 [31m56[0m bits [33mTLS_RSA_WITH_DES_CBC_SHA [0m Accepted TLSv1.2 [31m56[0m bits [33mTLS_DHE_RSA_WITH_DES_CBC_SHA [0m +Accepted TLSv1.2 [32m128[0m bits [35mTLS_DH_anon_WITH_RC4_128_MD5 [0m Accepted TLSv1.2 [31m56[0m bits [35mTLS_DH_anon_WITH_DES_CBC_SHA [0m +Accepted TLSv1.2 [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted TLSv1.2 [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted TLSv1.2 [32m128[0m bits [35mTLS_DH_anon_WITH_SEED_CBC_SHA[0m +Accepted TLSv1.2 [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m +Accepted TLSv1.2 [32m128[0m bits [35mTLS_ECDH_anon_WITH_RC4_128_SHA[0m [32mPreferred[0m [33mTLSv1.1[0m [32m256[0m bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.1[0m [32m256[0m bits DHE-RSA-AES256-SHA DHE [33m1024[0m bits Accepted [33mTLSv1.1[0m [32m256[0m bits DHE-RSA-CAMELLIA256-SHA DHE [33m1024[0m bits @@ -85,15 +86,10 @@ Accepted [33mTLSv1.1[0m [32m256[0m bits [35mADH-CAMELLIA256-SHA [0m DHE [33m1024[0m bits Accepted [33mTLSv1.1[0m [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.1[0m [32m128[0m bits DHE-RSA-AES128-SHA DHE [33m1024[0m bits -Accepted [33mTLSv1.1[0m [32m128[0m bits DHE-RSA-SEED-SHA DHE [33m1024[0m bits Accepted [33mTLSv1.1[0m [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE [33m1024[0m bits Accepted [33mTLSv1.1[0m [32m128[0m bits [35mAECDH-AES128-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.1[0m [32m128[0m bits [35mADH-AES128-SHA [0m DHE [33m1024[0m bits -Accepted [33mTLSv1.1[0m [32m128[0m bits [35mADH-SEED-SHA [0m DHE [33m1024[0m bits Accepted [33mTLSv1.1[0m [32m128[0m bits [35mADH-CAMELLIA128-SHA [0m DHE [33m1024[0m bits -Accepted [33mTLSv1.1[0m [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 -Accepted [33mTLSv1.1[0m [32m128[0m bits [35mAECDH-RC4-SHA [0m Curve P-256 DHE 256 -Accepted [33mTLSv1.1[0m [32m128[0m bits [35mADH-RC4-MD5 [0m DHE [33m1024[0m bits Accepted [33mTLSv1.1[0m [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.1[0m [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE [33m1024[0m bits Accepted [33mTLSv1.1[0m [32m112[0m bits [35mAECDH-DES-CBC3-SHA [0m Curve P-256 DHE 256 @@ -101,18 +97,23 @@ Accepted [33mTLSv1.1[0m [32m256[0m bits AES256-SHA Accepted [33mTLSv1.1[0m [32m256[0m bits CAMELLIA256-SHA Accepted [33mTLSv1.1[0m [32m128[0m bits AES128-SHA -Accepted [33mTLSv1.1[0m [32m128[0m bits SEED-SHA Accepted [33mTLSv1.1[0m [32m128[0m bits CAMELLIA128-SHA -Accepted [33mTLSv1.1[0m [32m128[0m bits IDEA-CBC-SHA -Accepted [33mTLSv1.1[0m [32m128[0m bits [33mRC4-SHA [0m -Accepted [33mTLSv1.1[0m [32m128[0m bits [33mRC4-MD5 [0m Accepted [33mTLSv1.1[0m [32m112[0m bits [33mDES-CBC3-SHA [0m Accepted [33mTLSv1.1[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_RC4_40_MD5[0m +Accepted [33mTLSv1.1[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted [33mTLSv1.1[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m Accepted [33mTLSv1.1[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5[0m +Accepted [33mTLSv1.1[0m [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA Accepted [33mTLSv1.1[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_DES40_CBC_SHA[0m Accepted [33mTLSv1.1[0m [31m56[0m bits [33mTLS_RSA_WITH_DES_CBC_SHA [0m Accepted [33mTLSv1.1[0m [31m56[0m bits [33mTLS_DHE_RSA_WITH_DES_CBC_SHA [0m +Accepted [33mTLSv1.1[0m [32m128[0m bits [35mTLS_DH_anon_WITH_RC4_128_MD5 [0m Accepted [33mTLSv1.1[0m [31m56[0m bits [35mTLS_DH_anon_WITH_DES_CBC_SHA [0m +Accepted [33mTLSv1.1[0m [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.1[0m [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.1[0m [32m128[0m bits [35mTLS_DH_anon_WITH_SEED_CBC_SHA[0m +Accepted [33mTLSv1.1[0m [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m +Accepted [33mTLSv1.1[0m [32m128[0m bits [35mTLS_ECDH_anon_WITH_RC4_128_SHA[0m [32mPreferred[0m [33mTLSv1.0[0m [32m256[0m bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m256[0m bits DHE-RSA-AES256-SHA DHE [33m1024[0m bits Accepted [33mTLSv1.0[0m [32m256[0m bits DHE-RSA-CAMELLIA256-SHA DHE [33m1024[0m bits @@ -121,15 +122,10 @@ Accepted [33mTLSv1.0[0m [32m256[0m bits [35mADH-CAMELLIA256-SHA [0m DHE [33m1024[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-AES128-SHA DHE [33m1024[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-SEED-SHA DHE [33m1024[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE [33m1024[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits [35mAECDH-AES128-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m128[0m bits [35mADH-AES128-SHA [0m DHE [33m1024[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits [35mADH-SEED-SHA [0m DHE [33m1024[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits [35mADH-CAMELLIA128-SHA [0m DHE [33m1024[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 -Accepted [33mTLSv1.0[0m [32m128[0m bits [35mAECDH-RC4-SHA [0m Curve P-256 DHE 256 -Accepted [33mTLSv1.0[0m [32m128[0m bits [35mADH-RC4-MD5 [0m DHE [33m1024[0m bits Accepted [33mTLSv1.0[0m [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE [33m1024[0m bits Accepted [33mTLSv1.0[0m [32m112[0m bits [35mAECDH-DES-CBC3-SHA [0m Curve P-256 DHE 256 @@ -137,18 +133,23 @@ Accepted [33mTLSv1.0[0m [32m256[0m bits AES256-SHA Accepted [33mTLSv1.0[0m [32m256[0m bits CAMELLIA256-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits AES128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits SEED-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits CAMELLIA128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits IDEA-CBC-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-SHA [0m -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-MD5 [0m Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDES-CBC3-SHA [0m Accepted [33mTLSv1.0[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_RC4_40_MD5[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m Accepted [33mTLSv1.0[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA Accepted [33mTLSv1.0[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_DES40_CBC_SHA[0m Accepted [33mTLSv1.0[0m [31m56[0m bits [33mTLS_RSA_WITH_DES_CBC_SHA [0m Accepted [33mTLSv1.0[0m [31m56[0m bits [33mTLS_DHE_RSA_WITH_DES_CBC_SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [35mTLS_DH_anon_WITH_RC4_128_MD5 [0m Accepted [33mTLSv1.0[0m [31m56[0m bits [35mTLS_DH_anon_WITH_DES_CBC_SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits [35mTLS_DH_anon_WITH_SEED_CBC_SHA[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [35mTLS_ECDH_anon_WITH_RC4_128_SHA[0m [1;34mServer Key Exchange Group(s):[0m TLSv1.2 [32m128[0m bits secp256r1 (NIST P-256)[0m diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_6.txt new/sslscan-2.1.0/docker_test/expected_output/test_6.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_6.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_6.txt 2023-09-05 15:54:34.000000000 +0200 @@ -24,9 +24,9 @@ TLSv1.3 [32mnot vulnerable[0m to heartbleed [1;34mSupported Server Cipher(s):[0m -[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_GCM_SHA256 Curve [32m25519[0m DHE 253 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_AES_256_GCM_SHA384 Curve [32m25519[0m DHE 253 -Accepted [32mTLSv1.3[0m [32m256[0m bits TLS_CHACHA20_POLY1305_SHA256 Curve [32m25519[0m DHE 253 +[32mPreferred[0m [32mTLSv1.3[0m [32m128[0m bits [32mTLS_AES_128_GCM_SHA256 [0m Curve [32m25519[0m DHE 253 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_AES_256_GCM_SHA384 [0m Curve [32m25519[0m DHE 253 +Accepted [32mTLSv1.3[0m [32m256[0m bits [32mTLS_CHACHA20_POLY1305_SHA256 [0m Curve [32m25519[0m DHE 253 Accepted [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_CCM_SHA256 Curve [32m25519[0m DHE 253 Accepted [32mTLSv1.3[0m [32m128[0m bits TLS_AES_128_CCM_8_SHA256 Curve [32m25519[0m DHE 253 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_7.txt new/sslscan-2.1.0/docker_test/expected_output/test_7.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_7.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_7.txt 2023-09-05 15:54:34.000000000 +0200 @@ -29,22 +29,22 @@ Accepted [33mTLSv1.0[0m [32m256[0m bits DHE-RSA-CAMELLIA256-SHA DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-AES128-SHA DHE [31m512[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-SEED-SHA DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE [31m512[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m256[0m bits AES256-SHA Accepted [33mTLSv1.0[0m [32m256[0m bits CAMELLIA256-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits AES128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits SEED-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits CAMELLIA128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits IDEA-CBC-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-SHA [0m -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-MD5 [0m Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDES-CBC3-SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA Accepted [33mTLSv1.0[0m [31m56[0m bits [33mTLS_RSA_WITH_DES_CBC_SHA [0m Accepted [33mTLSv1.0[0m [31m56[0m bits [33mTLS_DHE_RSA_WITH_DES_CBC_SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m [1;34mServer Key Exchange Group(s):[0m TLSv1.0 [32m128[0m bits secp256r1 (NIST P-256)[0m diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test/expected_output/test_8.txt new/sslscan-2.1.0/docker_test/expected_output/test_8.txt --- old/sslscan-2.0.16/docker_test/expected_output/test_8.txt 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test/expected_output/test_8.txt 2023-09-05 15:54:34.000000000 +0200 @@ -32,15 +32,10 @@ Accepted [33mTLSv1.0[0m [32m256[0m bits [35mADH-CAMELLIA256-SHA [0m DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-AES128-SHA DHE [31m512[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-SEED-SHA DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits DHE-RSA-CAMELLIA128-SHA DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits [35mAECDH-AES128-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m128[0m bits [35mADH-AES128-SHA [0m DHE [31m512[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits [35mADH-SEED-SHA [0m DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m128[0m bits [35mADH-CAMELLIA128-SHA [0m DHE [31m512[0m bits -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mECDHE-RSA-RC4-SHA [0m Curve P-256 DHE 256 -Accepted [33mTLSv1.0[0m [32m128[0m bits [35mAECDH-RC4-SHA [0m Curve P-256 DHE 256 -Accepted [33mTLSv1.0[0m [32m128[0m bits [35mADH-RC4-MD5 [0m DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m112[0m bits [33mECDHE-RSA-DES-CBC3-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDHE-RSA-DES-CBC3-SHA [0m DHE [31m512[0m bits Accepted [33mTLSv1.0[0m [32m112[0m bits [35mAECDH-DES-CBC3-SHA [0m Curve P-256 DHE 256 @@ -48,25 +43,30 @@ Accepted [33mTLSv1.0[0m [32m256[0m bits AES256-SHA Accepted [33mTLSv1.0[0m [32m256[0m bits CAMELLIA256-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits AES128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits SEED-SHA Accepted [33mTLSv1.0[0m [32m128[0m bits CAMELLIA128-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits IDEA-CBC-SHA -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-SHA [0m -Accepted [33mTLSv1.0[0m [32m128[0m bits [33mRC4-MD5 [0m Accepted [33mTLSv1.0[0m [32m112[0m bits [33mDES-CBC3-SHA [0m Accepted [33mTLSv1.0[0m [41m0[0m bits [41mECDHE-RSA-NULL-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [41m0[0m bits [41mAECDH-NULL-SHA [0m Curve P-256 DHE 256 Accepted [33mTLSv1.0[0m [41m0[0m bits [41mNULL-SHA [0m Accepted [33mTLSv1.0[0m [41m0[0m bits [41mNULL-MD5 [0m Accepted [33mTLSv1.0[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_RC4_40_MD5[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_MD5 [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_RSA_WITH_RC4_128_SHA [0m Accepted [33mTLSv1.0[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_IDEA_CBC_SHA Accepted [33mTLSv1.0[0m [31m40[0m bits [31mTLS_RSA_EXPORT_WITH_DES40_CBC_SHA[0m Accepted [33mTLSv1.0[0m [31m56[0m bits [33mTLS_RSA_WITH_DES_CBC_SHA [0m Accepted [33mTLSv1.0[0m [31m40[0m bits [31mTLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA[0m Accepted [33mTLSv1.0[0m [31m56[0m bits [33mTLS_DHE_RSA_WITH_DES_CBC_SHA [0m Accepted [33mTLSv1.0[0m [31m40[0m bits [35mTLS_DH_anon_EXPORT_WITH_RC4_40_MD5[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [35mTLS_DH_anon_WITH_RC4_128_MD5 [0m Accepted [33mTLSv1.0[0m [31m40[0m bits [35mTLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA[0m Accepted [33mTLSv1.0[0m [31m56[0m bits [35mTLS_DH_anon_WITH_DES_CBC_SHA [0m +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits TLS_DHE_RSA_WITH_SEED_CBC_SHA +Accepted [33mTLSv1.0[0m [32m128[0m bits [35mTLS_DH_anon_WITH_SEED_CBC_SHA[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [33mTLS_ECDHE_RSA_WITH_RC4_128_SHA[0m +Accepted [33mTLSv1.0[0m [32m128[0m bits [35mTLS_ECDH_anon_WITH_RC4_128_SHA[0m [1;34mServer Key Exchange Group(s):[0m TLSv1.0 [32m128[0m bits secp256r1 (NIST P-256)[0m diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/docker_test.sh new/sslscan-2.1.0/docker_test.sh --- old/sslscan-2.0.16/docker_test.sh 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/docker_test.sh 2023-09-05 15:54:34.000000000 +0200 @@ -53,7 +53,7 @@ # Returns 0 if current docker image exists. function check_if_docker_image_exists { - images=`docker image ls | egrep "$IMAGE_NAME[[:space:]]+$IMAGE_VERSION"` + images=`docker image ls | grep -E "$IMAGE_NAME[[:space:]]+$IMAGE_VERSION"` } @@ -247,7 +247,7 @@ compile_gnutls_all # Now build the docker image! - echo -e "${YELLOWB}Creating docker image...${CLR}" + echo -e "${YELLOWB}Creating docker image...$IMAGE_NAME:$IMAGE_VERSION ${CLR}" docker build --tag $IMAGE_NAME:$IMAGE_VERSION . echo -e "${YELLOWB}Docker image creation complete.${CLR}" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/missing_ciphersuites.h new/sslscan-2.1.0/missing_ciphersuites.h --- old/sslscan-2.0.16/missing_ciphersuites.h 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/missing_ciphersuites.h 2023-09-05 15:54:34.000000000 +0200 @@ -116,12 +116,12 @@ {0x0093, "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA", 112, VALL, 0}, {0x0094, "TLS_RSA_PSK_WITH_AES_128_CBC_SHA", 128, VALL, 0}, {0x0095, "TLS_RSA_PSK_WITH_AES_256_CBC_SHA", 256, VALL, 0}, - {0x0096, "TLS_RSA_WITH_SEED_CBC_SHA", -1, VALL, 0}, - {0x0097, "TLS_DH_DSS_WITH_SEED_CBC_SHA", -1, VALL, 0}, - {0x0098, "TLS_DH_RSA_WITH_SEED_CBC_SHA", -1, VALL, 0}, - {0x0099, "TLS_DHE_DSS_WITH_SEED_CBC_SHA", -1, VALL, 0}, - {0x009A, "TLS_DHE_RSA_WITH_SEED_CBC_SHA", -1, VALL, 0}, - {0x009B, "TLS_DH_anon_WITH_SEED_CBC_SHA", -1, VALL, 0}, + {0x0096, "TLS_RSA_WITH_SEED_CBC_SHA", 128, VALL, 0}, + {0x0097, "TLS_DH_DSS_WITH_SEED_CBC_SHA", 128, VALL, 0}, + {0x0098, "TLS_DH_RSA_WITH_SEED_CBC_SHA", 128, VALL, 0}, + {0x0099, "TLS_DHE_DSS_WITH_SEED_CBC_SHA", 128, VALL, 0}, + {0x009A, "TLS_DHE_RSA_WITH_SEED_CBC_SHA", 128, VALL, 0}, + {0x009B, "TLS_DH_anon_WITH_SEED_CBC_SHA", 128, VALL, 0}, {0x009C, "TLS_RSA_WITH_AES_128_GCM_SHA256", 128, VALL, 0}, {0x009D, "TLS_RSA_WITH_AES_256_GCM_SHA384", 256, VALL, 0}, {0x009E, "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", 128, VALL, 0}, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sslscan-2.0.16/sslscan.c new/sslscan-2.1.0/sslscan.c --- old/sslscan-2.0.16/sslscan.c 2023-04-08 23:36:58.000000000 +0200 +++ new/sslscan-2.1.0/sslscan.c 2023-09-05 15:54:34.000000000 +0200 @@ -1793,7 +1793,7 @@ printf("%s%-29s%s", COL_YELLOW, ciphername, RESET); } strength = "medium"; - } else if ((strstr(ciphername, "CHACHA20") || (strstr(ciphername, "GCM"))) && strstr(ciphername, "DHE")) { + } else if ((strstr(ciphername, "CHACHA20") || (strstr(ciphername, "GCM"))) && (strstr(ciphername, "DHE") || (strcmp(cleanSslMethod, "TLSv1.3") == 0))) { if (options->ianaNames) { printf("%s%-45s%s", COL_GREEN, ciphername, RESET); }
