notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
This referral link gives you 10% off a Fastmail.com account and gives me a discount on my Fastmail account.

Get notified when packages are built

A new feature has been added. FreshPorts already tracks package built by the FreeBSD project. This information is displayed on each port page. You can now get an email when FreshPorts notices a new package is available for something on one of your watch lists. However, you must opt into that. Click on Report Subscriptions on the right, and New Package Notification box, and click on Update.

Finally, under Watch Lists, click on ABI Package Subscriptions to select your ABI (e.g. FreeBSD:14:amd64) & package set (latest/quarterly) combination for a given watch list. This is what FreshPorts will look for.

Port details
testssl.sh Analyze and report TLS/SSL configuration/misconfiguration
3.0.9 security on this many watch lists=6 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.0.8_1Version of this port present on the latest quarterly branch.
Maintainer: adamw@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2017-06-30 15:16:09
Last Update: 2024-06-14 02:43:01
Commit Hash: 2e41933
People watching this port, also watch:: sudo, tmux, smartmontools, pkg, lsof
License: GPLv2
WWW:
https://github.com/drwetter/testssl.sh
Description:
testssl.sh is a command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Key features: - Clear output: you can tell easily whether anything is good or bad - Machine readable output (CSV, two JSON formats) - Flexibility: You can test any SSL/TLS enabled and STARTTLS service, not only webservers at port 443 - Toolbox: Several command line options help you to run your test and configure your output - Reliability: features are tested thoroughly - Privacy: It's only you who sees the result, not a third party
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (44 items)
Collapse this list.
  1. /usr/local/share/licenses/testssl.sh-3.0.9/catalog.mk
  2. /usr/local/share/licenses/testssl.sh-3.0.9/LICENSE
  3. /usr/local/share/licenses/testssl.sh-3.0.9/GPLv2
  4. bin/testssl.sh
  5. share/man/man1/testssl.1.gz
  6. share/testssl.sh/etc/Apple.pem
  7. share/testssl.sh/etc/DST Root CA X3.txt
  8. share/testssl.sh/etc/Java.pem
  9. share/testssl.sh/etc/Linux.pem
  10. share/testssl.sh/etc/Microsoft.pem
  11. share/testssl.sh/etc/Mozilla.pem
  12. share/testssl.sh/etc/README.md
  13. share/testssl.sh/etc/ca_hashes.txt
  14. share/testssl.sh/etc/cipher-mapping.txt
  15. share/testssl.sh/etc/client-simulation.txt
  16. share/testssl.sh/etc/client-simulation.wiresharked.md
  17. share/testssl.sh/etc/client-simulation.wiresharked.txt
  18. share/testssl.sh/etc/common-primes.txt
  19. share/testssl.sh/etc/curves.txt
  20. share/testssl.sh/etc/curves-mapping.txt
  21. share/testssl.sh/etc/openssl.cnf
  22. share/testssl.sh/etc/tls_data.txt
  23. share/testssl.sh/utils/00_unittest_baseline.sh
  24. share/testssl.sh/utils/ccs-injection.bash
  25. share/testssl.sh/utils/checkcert.sh
  26. share/testssl.sh/utils/create_ca_hashes.sh
  27. share/testssl.sh/utils/curves.bash
  28. share/testssl.sh/utils/docker-debian10.tls13only.start.sh
  29. share/testssl.sh/utils/docker-nginx.tls13-earlydata.start.sh
  30. share/testssl.sh/utils/generate_static_cipher_lists.sh
  31. share/testssl.sh/utils/gmap2testssl.sh
  32. share/testssl.sh/utils/heartbleed.bash
  33. share/testssl.sh/utils/hexstream2cipher.sh
  34. share/testssl.sh/utils/make-openssl.sh
  35. share/testssl.sh/utils/make-openssl111.sh
  36. share/testssl.sh/utils/parse_client_ciphers.pl
  37. share/testssl.sh/utils/prototype.ssl2proto-check.bash
  38. share/testssl.sh/utils/prototype.tls-protocol-checker.bash
  39. share/testssl.sh/utils/resume.sh
  40. share/testssl.sh/utils/ticketbleed.bash
  41. share/testssl.sh/utils/update_client_sim_data.pl
  42. @owner
  43. @group
  44. @mode
Collapse this list.
Dependency lines:
  • testssl.sh>0:security/testssl.sh
To install the port:
cd /usr/ports/security/testssl.sh/ && make install clean
To add the package, run one of these commands:
  • pkg install security/testssl.sh
  • pkg install testssl.sh
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: testssl.sh
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1718332771 SHA256 (drwetter-testssl.sh-v3.0.9_GH0.tar.gz) = 75ecbe4470e74f9ad17f4c4ac733be123b0f67d676ed24cc2b30adb41561e05f SIZE (drwetter-testssl.sh-v3.0.9_GH0.tar.gz) = 9381651

Packages (timestamps in pop-ups are UTC):
testssl.sh
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.0.8_13.0.9-3.0.8_13.0.9---
FreeBSD:13:quarterly3.0.8_13.0.8_13.0.83.0.8_13.0.8_13.0.83.0.83.0.8
FreeBSD:14:latest3.0.8_13.0.93.0.83.0.8_13.0.93.0.8-3.0.8
FreeBSD:14:quarterly3.0.8_13.0.8_1-3.0.8_13.0.8_13.0.83.0.83.0.8
FreeBSD:15:latest3.0.8_13.0.9n/a3.0.8_1n/a3.0.8_13.0.8_13.0.8_1
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Test dependencies:
  1. p5-JSON>=0 : converters/p5-JSON
  2. perl5>=5.36<5.37 : lang/perl5.36
Runtime dependencies:
  1. openssl-unsafe>=1.0.1 : security/openssl-unsafe
  2. bash : shells/bash
There are no ports dependent upon this port

Configuration Options:
No options to configure
Options name:
security_testssl.sh
USES:
perl5 shebangfix
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeload.github.com/drwetter/testssl.sh/tar.gz/v3.0.9?dummy=/
Collapse this list.

Number of commits found: 34

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
3.0.9
14 Jun 2024 02:43:01
commit hash: 2e4193315e782e5c5cdc2edf0bc75b374c7103d2commit hash: 2e4193315e782e5c5cdc2edf0bc75b374c7103d2commit hash: 2e4193315e782e5c5cdc2edf0bc75b374c7103d2commit hash: 2e4193315e782e5c5cdc2edf0bc75b374c7103d2 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
security/testssl.sh: Update to 3.0.9
3.0.8_1
10 Jan 2024 15:29:49
commit hash: e4610fcb8b73442ad40b744bb87c1bc428ef7c1ccommit hash: e4610fcb8b73442ad40b744bb87c1bc428ef7c1ccommit hash: e4610fcb8b73442ad40b744bb87c1bc428ef7c1ccommit hash: e4610fcb8b73442ad40b744bb87c1bc428ef7c1c files touched by this commit
Baptiste Daroussin (bapt) search for other commits by this committer
MAN?PREFIX: eleminate its usage  and move man to share/man
3.0.8
29 Sep 2022 00:08:09
commit hash: 9577312b6e7f77235e9e96208a93ff6d4bc3f010commit hash: 9577312b6e7f77235e9e96208a93ff6d4bc3f010commit hash: 9577312b6e7f77235e9e96208a93ff6d4bc3f010commit hash: 9577312b6e7f77235e9e96208a93ff6d4bc3f010 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
security/testssl.sh: Update to 3.0.8

Changes:
  Fix grep 3.8 warnings on fgrep and unneeded escapes of hyphen, slash, space
(Geert)
  Fix alignment for cipher output (David)
  News binaries (Darwin from Barry), carry now the appendix -bad and fixes a
security problem.
  Backport from higher OpenSSL version to support xmpp-server
  Fix CT (David)
  Fix decryption of TLS 1.3 response (David)
  Upgrade Dockerfile to Alpine to 3.15
  Fix pretty JSON formatting when warning is issued (David)
  Update of certificate stores
  Major update of client simulation (9 new simulations , >4 removed in default
run)
  Fix CRIME output on servers only supporting TLS 1.3 (Tomasz)
  Fix censys link
  Fix ome handshake problems w $OPENSSL ciphers, extend
determine_optimal_sockets_params() to more
  ciphers, fix PROTOS_OFFERED (David)
  Relax STARTTLS FTP requirement so that it doesn't require TLS after AUTH
  Fix run_server_preference() with no default protocol (David)
  Fix getting CRL / NO_SESSION_ID under some circumstances (David)
  Improve/fix OpenSSL 3.0 compatibility (David)
  Fix formatting to documentation
  Add FFDHE groups to supported_groups (David)
  Include RSA-PSS in ClientHello (David)
07 Sep 2022 21:58:51
commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
3.0.7
07 Sep 2022 21:10:59
commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
3.0.7
19 Feb 2022 20:43:01
commit hash: 33e5fc630e242922621e2e0303fd2f1c2543c301commit hash: 33e5fc630e242922621e2e0303fd2f1c2543c301commit hash: 33e5fc630e242922621e2e0303fd2f1c2543c301commit hash: 33e5fc630e242922621e2e0303fd2f1c2543c301 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
security/testssl.sh: Update to 3.0.7

Changes:
  Fix "ID resumption test failed" bug under Darwin
  Fix "locale error message when en_US.UTF-8 isn't available" bug
  Fix "Darwin / LibreSSL startup problem" which leads to a question upfront
  Make upfront handshake tests more compatible by adding </dev/null (David)
  Take 'HTTP Age' HTTP header into account when determine HTTP time (Wahnes)
  Fix JSON header (structured JSON output) name (David)
  Robustness: Update reset_hostdepended_vars() for mass tests (David)
  Simplify determination of git stuff (Matthias)
  Fix "newline to spaces" in JSON and CSV findings (David)
  Fix "Bad file descriptor with --connect-timeout option"
  SSLv2 fixes, OpenSSL fixes 3.X (David)
  Improve cipher_pref_check() for detecting prioritization of ChaCha ciphers
  Simplify + speed up pre-check
  Addressing lame DNS responses on WSL
  Fix big serial # issue in certs
  Fix invalid JSON when certificate issuer containing non-ASCII chars
3.0.6
03 Oct 2021 16:53:09
commit hash: c8d13ff17f78a215ad3375a2e9a7a1f128ed62ffcommit hash: c8d13ff17f78a215ad3375a2e9a7a1f128ed62ffcommit hash: c8d13ff17f78a215ad3375a2e9a7a1f128ed62ffcommit hash: c8d13ff17f78a215ad3375a2e9a7a1f128ed62ff files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
security/testssl.sh: Update to 3.0.6
3.0.5
10 May 2021 16:42:06
commit hash: 14d57ad6df82b4e05148d63ff8839893a3405a12commit hash: 14d57ad6df82b4e05148d63ff8839893a3405a12commit hash: 14d57ad6df82b4e05148d63ff8839893a3405a12commit hash: 14d57ad6df82b4e05148d63ff8839893a3405a12 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
security/testssl.sh: Update to 3.0.5
3.0.4
07 Apr 2021 08:09:01
commit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455c files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
One more small cleanup, forgotten yesterday.
Reported by:	lwhsu
3.0.4
06 Apr 2021 14:31:07
commit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344eb files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
Remove # $FreeBSD$ from Makefiles.
3.0.4
22 Nov 2020 15:37:05
Revision:556057Original commit files touched by this commit
adamw search for other commits by this committer
security/testssl.sh: Update to 3.0.4
3.0.3
19 Nov 2020 16:11:53
Revision:555709Original commit files touched by this commit
adamw search for other commits by this committer
security/testssl.sh: Update to 3.0.3

* Update certificate stores
* manpage fix (Karl)
* minor speedups for some vulnerability tests
* bash 5.1 fix
* Secure Client-Initiated Renegotiation false positive fix
* BREACH is now medium
* invalid JSON fix and other JSON improvements (David)
* Adding native Android 7 handshake instead of Chrome which has TLS 1.3
(Christoph)
* Header flag X-XSS-Protection is now labled as INFO
* No cyan colors in HHHTP header flags anymore, colons added
* Dockerfile improvments
3.0.2
29 Sep 2020 10:10:51
Revision:550490Original commit files touched by this commit
adamw search for other commits by this committer
security/testssl.sh: Turn REINPLACEs into patches

While here, improve some text strings and general formatting.
3.0.2
29 Sep 2020 09:15:26
Revision:550484Original commit files touched by this commit
adamw search for other commits by this committer
Adopt these ports
3.0.2
28 Sep 2020 05:05:25
Revision:550400Original commit files touched by this commit
tobik search for other commits by this committer
Reset MAINTAINER
3.0.2
09 May 2020 04:11:16
Revision:534705Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0.2

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/3.0.2
3.0.1
15 Apr 2020 11:25:28
Revision:531760Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0.1

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/3.0.1
3.0
24 Jan 2020 21:16:35
Revision:523989Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/3.0
3.0.r6
13 Dec 2019 06:02:08
Revision:519967Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0rc6

- Hook up tests

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/3.0rc6
3.0.r5
26 Apr 2019 04:45:50
Revision:500078Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0rc5

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/3.0rc5
3.0.r4
20 Feb 2019 07:43:32
Revision:493414Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0rc4

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/3.0rc4
MFH:		2019Q1 (bug fixes)
3.0.r3
01 Dec 2018 09:01:07
Revision:486327Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0rc3

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/3.0rc3
MFH:		2018Q4 (bugfixes)
3.0.r2
10 Oct 2018 08:10:51
Revision:481701Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0rc2

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/3.0rc2
MFH:		2018Q4 (bugfixes)
3.0.r1
08 Sep 2018 11:33:55
Revision:479248Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 3.0rc1
2.9.5.5
15 Apr 2018 08:53:35
Revision:467376Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 2.9.5-5

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5-5
2.9.5.4
10 Apr 2018 08:13:16
Revision:466943Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 2.9.5-4

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5-4
2.9.5.3
25 Mar 2018 08:43:20
Revision:465506Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 2.9.5-3

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5-3
2.9.5.2_1
18 Mar 2018 09:02:42
Revision:464885Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Fix certificate expiration check

Upstream commit af6ca18933ffc5bb02d2ced46342b8d7a6275acd dropped the
TZ offset from the certificate enddate but the FreeBSD date format was
not updated accordingly.  Remove the unnecessary %z from the format
string.

- While here add NO_ARCH

PR:		226676
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
2.9.5.2
15 Mar 2018 11:18:04
Revision:464582Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 2.9.5-2

PR:		226422
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
2.9.5.1_1
06 Nov 2017 20:33:12
Revision:453645Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Use security/openssl-unsafe

This greatly simplifies the port and we can stop building our own
unsafe openssl version.

PR:		223457
Submitted by:	brnrd
2.9.5.1
21 Sep 2017 09:24:20
Revision:450246Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 2.9.5-1

Changes:	https://github.com/drwetter/testssl.sh/compare/v2.9.5...v2.9.5-1
2.9.5
20 Sep 2017 09:27:26
Revision:450191Original commit files touched by this commit
tobik search for other commits by this committer
security/testssl.sh: Update to 2.9.5

Changes:	https://github.com/drwetter/testssl.sh/releases/tag/v2.9.5
2.8_1
05 Jul 2017 07:53:45
Revision:445053Original commit files touched by this commit
tobik search for other commits by this committer
Only use enable-ec_nistp_64_gcc_128 on amd64 since it requires a
64-bit little-endian architecture and fix the build on !amd64

ecp_nistp224.c:43:9: error: unknown type name '__uint128_t'
typedef __uint128_t uint128_t;	/* nonstandard; implemented by gcc on 64-bit
	^

PR:		220403
Reported by:	dewayne@heuristicsystems.com.au
Approved by:	mat (mentor)
Differential Revision:	https://reviews.freebsd.org/D11436
MFH:		2017Q3
2.8
30 Jun 2017 15:15:59
Revision:444763Original commit files touched by this commit
tobik search for other commits by this committer
New port: security/testssl.sh

testssl.sh is a command line tool which checks a server's service on
any port for the support of TLS/SSL ciphers, protocols as well as some
cryptographic flaws.  Key features:

- Clear output: you can tell easily whether anything is good or bad
- Flexibility: You can test any SSL/TLS enabled and STARTTLS service,
  not only webservers at port 443
- Toolbox: Several command line options help you to run YOUR test and
  configure YOUR output
- Reliability: features are tested thoroughly
- Verbosity: If a particular check cannot be performed because of a
  missing capability on your client side, you'll get a warning
- Privacy: It's only you who sees the result, not a third party

WWW: https://github.com/drwetter/testssl.sh

Approved by:	mat (mentor)
Differential Revision:	https://reviews.freebsd.org/D11406

Number of commits found: 34