testssl.sh

No entries match these filters. Clear filters

1. docs update Oct 8, 2026 · issue 097

   testssl.sh docs reveal --mtls, --reqheader, --basicauth, --proxy, and --ip=proxy options for mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with., custom headers, and proxied scans.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Scan a server that requires mutual TLSmutual TLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with., providing a combined PEM file with the client cert and unencrypted private key.
   copy

   $ testssl.sh --mtls /path/to/client-cert-and-key.pem https://internal-api.example.com:8443

   Inject a Proxy-Authorization header and a custom ClientID header when checking security headers on a server behind an authenticating proxy.
   copy

   $ testssl.sh --reqheader 'Proxy-Authorization: Basic dGVzdHNzbDpydWxlcw==' --reqheader 'ClientID: 0xDEADBEAF' https://internal.example.com

   Run mass testing from nmap greppable output through a SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access./HTTP proxy with no local DNS, avoiding resolution timeouts in an air-gapped environment.
   copy

   $ testssl.sh --proxy 10.0.0.1:3128 --ip=proxy --nodns=min --file nmap-results.gnmap

   • Adds --mtls <path_to_client_cert> (env: MTLS) to supply a PEM file containing a client certificate and unencrypted private key for mutual TLS authentication against remote servers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds --reqheader <header> (env: REQHEADER) to inject arbitrary HTTP request headers (e.g. Proxy-Authorization, ClientID) into security-header checks; the flag can be repeated for multiple headers.
   • Adds --basicauth <user:pass> (env: BASICAUTH) to provide HTTP Basic Auth credentials used during security-header checks.
   • Adds --ip=proxy to resolve hostnames via the configured proxy, combinable with --nodns=min to avoid DNS timeouts in environments with no local DNS.
   • Adds --connect-timeout <seconds> (env: CONNECT_TIMEOUT) to cap TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. handshake wait time, preventing indefinite hangs against firewalled or tarpit hosts.

   +7 more show less

   • Adds --openssl-timeout <seconds> (env: OPENSSL_TIMEOUT) to terminate hung OpenSSL connects, especially useful during mass testing.
   • Adds --proxy <host>:<port> and --proxy=auto (inherits proxy from environment) to route all checks through a specified proxy, with IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. proxy support via newer OpenSSL/LibreSSL.
   • Supports nmap greppable output format (-oG) as input to --file/-iL, automatically mapping open ports to the correct STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports. or plain-TLS mode via an internal port-to-protocol table.
   • Adds --mode <serial|parallel> (env: MASS_TESTING_MODE) and shortcut flags --parallel/--serial to control mass-testing concurrency.
   • Adds --ip=one to pin testing to the first DNS A record (or AAAA if available), useful when a hostname resolves to multiple IPs.
   • Adds --mx <domain|host> to test all MX records (STARTTLS on port 25) from highest to lowest priority.
   • Supports STARTTLS for lmtp, nntp, postgres, and mysql protocols via -t/--starttls (requires supplied OpenSSL or version 1.1.1+).

   12 details in Everything

2. v3.2.4 Jul 12, 2026 · release notes

   testssl.sh v3.2.4 adds OpenSSL 4 compatibility, new TLS signature schemes and Brainpool groups support.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.2.4 https://github.com/testssl/testssl.sh.git
   # already have the repo? check out this version:
   $ git checkout v3.2.4

   • Adds OpenSSL 4 compatibility for standard scans
   • Adds support for missing TLS signature schemes in detection logic
   • Adds support for missing TLS 1.3 Brainpool groups

   3 details in Everything

3. v3.2.3 Feb 12, 2026 · release notes

   testssl.sh v3.2.3 renames the ROBOT timeout environment variable and updates CA stores

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.2.3 https://github.com/drwetter/testssl.sh.git
   # already have the repo? check out this version:
   $ git checkout v3.2.3

   └──▷ TRY IT
   Run testssl.sh with a custom 30-second timeout for the ROBOT check.
   copy

   $ ROBOT_TIMEOUT=30 ./testssl.sh <target>

   • Updates the Linux CA store bundle and adds support for the Sectigo R46 root certificate.

   1 detail in Everything

   └──▷ BREAKING ON UPGRADE

   • !The MAX_WAITSOCK environment variable is renamed to ROBOT_TIMEOUT; scripts relying on the old name will no longer apply this timeout.
4. v3.2.1 Jun 13, 2025 · release notes

   testssl.sh v3.2.1 adds Android 15 handshake simulation capability to the CLI

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.2.1 https://github.com/drwetter/testssl.sh.git
   # already have the repo? check out this version:
   $ git checkout v3.2.1

   └──▷ USE IT
   Test a server's compatibility with Android 15 TLS requirements by simulating its specific handshake.
   shell copy

   testssl.sh --android15 example.com

   • Add --android15 flag to simulate TLS handshakes for Android 15 devices

   1 detail in Everything

5. v3.2rc4 Prerelease Jan 24, 2025 · release notes

   testssl.sh v3.2rc4 adds ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake./KyberKyberNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. cipher suites, LibreSSL 4 support, and RFC 9150 TLS 1.3 ciphers

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.2rc4 https://github.com/testssl/testssl.sh.git
   # already have the repo? check out this version:
   $ git checkout v3.2rc4

   • SecP256r1MLKEM768, X25519MLKEM768, SecP384r1MLKEM1024, and X25519Kyber768Draft00 cipher suites are now tested
   • RFC 9150 cipher suites (TLS 1.3) are now supported
   • Support for LibreSSL up to version 4 is added
   • Stapled OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists. responses using SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. are now supported

   4 details in Everything

6. v3.2rc3 Prerelease Oct 10, 2023 · release notes

   testssl.sh v3.2rc3 adds STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports. XMPP support, new flags --user-agent/--reqheader/ --add-ca dir, and SSL Labs-style rating.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.2rc3 https://github.com/drwetter/testssl.sh.git
   # already have the repo? check out this version:
   $ git checkout v3.2rc3

   └──▷ USE IT
   Use a custom User-Agent for testing servers that block default scripts.
   shell copy

   ./testssl.sh --user-agent "Mozilla/5.0" <target>

   Pass custom headers for testing application-layer behavior or bypassing simple WAFs.
   shell copy

   ./testssl.sh --reqheader "Authorization: Bearer token123" <target>

   Scan a directory of certificates using the new --add-ca directory support.
   shell copy

   ./testssl.sh --add-ca /path/to/certs/ <target>

   • Adds SSL certificate ratings similar to SSL Labs
   • Extends Server (cipher) preference handling: always runs in wide mode instead of all ciphers at the end (per default)
   • Adds support for certificates with EdDSAEdDSAA fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. signatures and public keys
   • Extracts CA list showing supported certification authorities sent by the server
   • Adds TLS 1.2 and TLS 1.3 signature algorithms check

   +12 more show less

   • Adds ffdhe groups testing
   • Allows --add-ca to accept a directory with *.pem files
   • Adds environment variable for amount of attempts for ssl renegotiation check
   • Adds --user-agent argument to support using a custom User Agent
   • Adds --overwrite argument to support overwriting output files without warning
   • Enables strict parser for HSTSHSTSAn HTTP response header, standardized in RFC 6797, that instructs browsers to contact a site over HTTPS only for a declared period, preventing protocol-downgrade and cookie-hijacking attacks.
   • Adds --reqheader to support custom headers in HTTP requests
   • Tests for support for RFC 8879 certificate compression
   • Adds test for STARTTLS injection vulnerabilities (SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure., POP3, IMAP)
   • Adds XMPP server support for STARTTLS
   • Adds STARTTLS on active directory service support
   • Tests for old winshock vulnerability

   17 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Removes the display of 'negotiated cipher / protocol' from output
7. v3.0.8 Sep 28, 2022 · release notes

   testssl.sh v3.0.8 adds client simulation suite updates and RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-PSS/FFDHE support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.0.8 https://github.com/testssl/testssl.sh.git
   # already have the repo? check out this version:
   $ git checkout v3.0.8

   • Major update of client simulation with 9 new simulations and >4 removed in default run.
   • Include RSA-PSS in ClientHello to enable checking for that cipher suite capability.
   • Add FFDHE groups to supported_groups during client hello construction.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !>4 simulations removed from the default run.
8. v3.0 Oct 3, 2021 · release notes

   testssl.sh v3.0 adds TLS 1.3 support, ROBOT check, new CLI flags and STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports. protocols

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.0 https://github.com/drwetter/testssl.sh.git
   # already have the repo? check out this version:
   $ git checkout v3.0

   └──▷ TRY IT
   Check for private key compromise and OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists./CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. revocation status via external sources.
   copy

   $ ./testssl.sh --phone-out <target>

   Set a specific socket timeout for batch scanning to avoid hangs.
   copy

   $ ./testssl.sh --connect-timeout 10 <target>

   • New --connect-timeout flag to set socket connection timeouts
   • New --ids-friendly switch added
   • Adds initial client certificate support
   • New HTTP Basic Auth support for HTTP header checks
   • Experimental eTLS detection capability

   +1 more show less

   • Support for NNTP and LMTP via STARTTLS, with fixes for MySQL and PostgreSQL

   6 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Exit codes are now more strict: 0 for running without error, 1+n for small errors, >240 for major errors
9. 3.0rc6 Prerelease Dec 11, 2019 · release notes

   testssl.sh 3.0rc6 adds socket timeout control, IDN servername, pwnedkeys.com integration, and certificate compression support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.0rc6 https://github.com/drwetter/testssl.sh.git
   # already have the repo? check out this version:
   $ git checkout 3.0rc6

   • Adds --connect-timeout flag to set socket timeouts for connections.
   • Adds IDN/IDN2 servername support for internationalized domain names.
   • Adds pwnedkeys.com support for checking compromised keys.
   • Adds initial support for certificate compression.
   • Adds initial client certificate support.

   5 details in Everything

10. 3.0rc4 Prerelease Feb 19, 2019 · release notes

    testssl.sh 3.0rc4 adds openssl helper binaries, eTLS detection, and socket-based startup

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.0rc4 https://github.com/testssl/testssl.sh.git
    # already have the repo? check out this version:
    $ git checkout 3.0rc4

    • Adds new openssl helper binaries to the distribution package
    • Adds eTLS detection to identify visibility information during scans
    • Switches initial server check to use raw sockets to minimize false warning "doesn't seem to be a TLS/SSL enabled server"

    3 details in Everything

11. 3.0rc3 Prerelease Nov 30, 2018 · release notes

    testssl.sh 3.0rc3 adds SSLv2 cipher testing, STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports. NNTP support, and DH groups to PFS section

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.0rc3 https://github.com/drwetter/testssl.sh.git
    # already have the repo? check out this version:
    $ git checkout 3.0rc3

    • Adds SSLv2 cipher testing (total ciphers now being tested for: 370)
    • Adds STARTTLS NNTP protocol support
    • Includes DH groups (primes) in the perfect forward secrecy (pfs) section

    3 details in Everything

12. 3.0rc2 Prerelease Oct 9, 2018 · release notes

    testssl.sh 3.0rc2 adds name check for XMPP servers, STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports. LMTP support, and TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. fragmentation handling.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.0rc2 https://github.com/testssl/testssl.sh.git
    # already have the repo? check out this version:
    $ git checkout 3.0rc2

    • Adds namecheck for XMPP servers
    • Supports STARTTLS LMTP probing

    2 details in Everything

13. 3.0rc1 Prerelease Sep 16, 2018 · release notes

    testssl.sh 3.0rc1 adds ROBOT check and TLS 1.3 detection

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.0rc1 https://github.com/drwetter/testssl.sh.git
    # already have the repo? check out this version:
    $ git checkout 3.0rc1

    └──▷ USE IT
    Run the ROBOT check against a target server
    shell copy

    ./testssl.sh -R <target>

    • Adds ROBOT check to detect Return of Bleichenbacher's Oracle Threat

    1 detail in Everything

14. v2.9.5-1 Sep 20, 2017 · release notes

    testssl.sh v2.9.5 adds socket-based TLS checks, LUCKY13/SWEET32/Ticketbleed detections, non-flat JSON output, and native HTML rendering

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.9.5-1 https://github.com/drwetter/testssl.sh.git
    # already have the repo? check out this version:
    $ git checkout v2.9.5-1

    └──▷ USE IT
    Export findings with severity filtering in non-flat JSON format
    shell copy

    testssl.sh -e --severity HIGH --format json-nonflat example.com

    Output results directly as HTML without external converter
    shell copy

    testssl.sh -f html example.com > report.html

    • Adds TLS Supported Groups Registry (RFC 7919), key shares extension check via sockets
    • Adds Non-flat JSON output support for findings export
    • Adds LUCKY13 and SWEET32 vulnerability checks
    • Adds Ticketbleed side-channel check
    • Adds native HTML rendering (-f json no longer requires aha)

    +4 more show less

    • Adds -t <seconds> option to supply timeout value for openssl connect
    • Adds CAA RR, OCSP must staple, and Certificate TransparencyCertificate TransparencyA public, append-only log system maintained by various operators (Google runs several) that records every TLS certificate issued, letting anyone audit CAs for misissued or rogue certificates. checks
    • Adds Postgres und MySQL STARTTLS support
    • Adds nmap grep(p)able (-oG) format support for mass testing file input

    9 details in Everything

15. v2.8 May 10, 2017 · release notes

    testssl.sh v2.8 adds JSON/CSV logging, HPKP root checks, DROWN detection, and HTTP2/ALPN testing

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.8 https://github.com/drwetter/testssl.sh.git
    # already have the repo? check out this version:
    $ git checkout v2.8

    • --logfile enables logging output to a file or directory for later analysis
    • --jsonfile exports results in flat JSON format for automated processing
    • --csvfile exports results in CSV format for spreadsheet integration
    • --htt2 flag enables HTTP2/ALPN protocol check on the target server
    • --hpkp checks HPKP headers including Root and intermediate SPKIs, not just end-entity keys

    +3 more show less

    • --drown adds a dedicated check for the DROWN vulnerability
    • Supports x509x509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. client certificate authentication for servers requiring mutual TLSmutual TLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with.
    • Adds trust chain validation against Apple, Linux, Microsoft, and Mozilla certificate stores

    8 details in Everything

16. v2.6 Sep 26, 2015 · release notes

    testssl.sh v2.6 adds mass testing file (--file), proxy support, and LOGJAM bit display

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.6 https://github.com/drwetter/testssl.sh.git
    # already have the repo? check out this version:
    $ git checkout v2.6

    • Adds --file option to read test commands from a mass testing file.
    • Adds (HTTP) proxy support via openssl and sockets.
    • Adds TLS_FALLBACK_SCSV check capability.
    • Adds Extended validation certificate detection.
    • Enables testing multiple IP addresses in one shot with --ip=<address|"one">.

    +2 more show less

    • Adds LOGJAM 2: displays DH(/ECDH) bits in wide mode on negotiated ciphers.
    • Adds wide mode option for checks like RC4, BEAST, PFS to display hexcode, kx, strength, DH bits, RFC name.

    7 details in Everything