Skip to content

Commit 50f324c

Browse files
committed
Update docs and bump version
1 parent 7873712 commit 50f324c

File tree

4 files changed

+9
-24
lines changed

4 files changed

+9
-24
lines changed

Changelog

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
Changelog
22
=========
33

4-
Version: TBC
5-
Date : TBC
4+
Version: 2.2.0
5+
Date : 15/06/2025
66
Author : rbsec <robin@rbsec.net>
77
Changes: The following are a list of changes
8-
> OpenSSL 3.5 is now the minimum version to build against
8+
> OpenSSL 3.5 is now the minimum version to build against (credit tetlowgm)
99
> Various code cleanup dropping support for legacy OpenSSL versions (credit tetlowgm)
1010
> Handle some servers that rejecting large ClientHello messages (credit jtesta)
1111
> Add support for new post-quantum groups (credit jtesta)

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ Key changes are as follows:
7777

7878
### Building on Linux
7979

80-
It is recommended to ignore the OpenSSL system installation and statically build against your own version. Although this results in a more resource-heavy `sslscan` binary (file size, memory consumption, etc.), this allows some additional checks such as TLS compression. Note that the minimum OpenSSL version required by sslscan is 3.5.0 (LTS), so if your distro ships an older version then building against it will not work, and you will have to do a static build.
80+
It is recommended to ignore the OpenSSL system installation and statically build against your own version. Although this results in a more resource-heavy `sslscan` binary (file size, memory consumption, etc.), this allows some additional checks such as TLS compression. Note that as of sslscan version 2.2.0, the minimum OpenSSL version required by sslscan is 3.5.0 (LTS), so if your distro ships an older version then building against it will not work, and you will have to do a static build.
8181

8282
To compile your own OpenSSL version, you'll probably need to install the OpenSSL build dependencies. The commands below can be used to do this on Debian.
8383

TODO

Lines changed: 0 additions & 16 deletions
This file was deleted.

sslscan.1

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ sslscan \- Fast SSL/TLS scanner
66
.RI [ options ] " [host:port | host]"
77
.SH DESCRIPTION
88
.PP
9-
\fBsslscan\fP queries SSL/TLS services (such as HTTPS) and reports the protocol versions, cipher suites, key exchanges, signature algorithms, and certificates in use. This helps the user understand which parameters are weak from a security standpoint.
9+
\fBsslscan\fP queries SSL/TLS services (such as HTTPS) and reports the protocol versions, cipher suites, key exchanges, signature algorithms, and certificates in use. This helps the user understand which parameters are weak from a security standpoint. \fBsslscan\fP can also output results into an XML file for easy consumption by external programs.
1010

1111
Terminal output is thus colour-coded as follows:
1212

@@ -19,9 +19,10 @@ Ciphers and algorithms with demonstrated vulnerabilities, or that are generally
1919
.B Yellow
2020
Ciphers and algorithms with known weaknesses or that are still too new to widely trusted, but that are not generally considered exploitable (even by the standards of TLS vulnerabilities).
2121
.br
22-
23-
\fBsslscan\fP can also output results into an XML file for easy consumption by external programs.
24-
22+
.B Green
23+
Ciphers and algorithms that are aligned with current recommended best practices.
24+
.br
25+
.br
2526
.SH OPTIONS
2627
.TP
2728
.B \-\-help

0 commit comments

Comments
 (0)