Skip to content

Latest commit

 

History

History
133 lines (91 loc) · 3.7 KB

CHANGELOG.md

File metadata and controls

133 lines (91 loc) · 3.7 KB
Raw

Changelog

3.2

  • Add support for PHP 7.
  • Add support for OpenSSL 1.1.0
  • OpenSSL 1.1 has full IPv6 support in the CLI tools. Therefore the following checks work and the warnings are removed:
    • OCSP stapling check
    • TLS_FALLBACK_SCSV
    • SSL Compression
  • Add Dockerfile to set up a dev environment or self hosted instance very fast, since OpenSSL 1.1.0 is now a requirement and not every server will have that right now.

3.1

  • Fix HTTP header resolution in some cloudflare cases (HSTS/HPKP)
  • Fix some small typo's
  • Add introduction text
  • Add input types to form for mobile devices

3.0

  • Add chain reconstruction. If a chain is wrong or incomplete, we construct the correct chain based on earlier checks and the AuthorityInfoAccess extension.
  • Add display of certificate chain when single certificate is given.
  • Add display of Subject Alternative Names in CSR parsing output.
  • Add display of CSR PEM in CSR parsing output.
  • Small code fixes, comment improvements.

2.9

  • Add certificate hashes (MD5, SHA1, SHA256, SHA384, SHA512).
  • Add TLSA validation check.
  • Add "fast check" option which disables connection data, dns and certificate transparency submission to speed up the result (less remote requests).
  • Add loading cog to multiple endpoint chooser.

2.8

  • Add Certificate Transparency Submission
  • Small formatting changes

2.7

2.6

  • Fix testing of IPv6 only hosts.
  • Fix correct reverse DNS lookup for IPv6.
  • Don't test OCSP stapling, TLS_FALLBACK_SCSV and SSL Compression on IPv6 hosts because of bugs in OpenSSL's tools (https://rt.openssl.org/Ticket/Display.html?id=1365&user=guest&pass=guest). Don't give invalid test results, instead, give user a warning about it.
  • Add host header to get_headers function (fix #35).

2.5

  • Show specific endpoint picker when multiple A/AAAA records exist.
  • Add support for testing specific IP's with specific hostnames (instead of what DNS says)

2.4

  • Add SSL Compressio check
  • Add Heartbleed test (requires python2)
  • Add some tooltips for topics

2.3

  • Add warning if certificate expires in < 30 days.

2.2

  • Add SSLv2 test
  • Fix long duration and possible timeout on non-http(s) tests

2.1

  • Add json API endpoint (see README).
  • Rewrote internals to use same endpoint.
  • Add warnings for connection and certificate issues.
  • Don't follow redirects during HTTP header gathering.

2.0

  • Add TLS_FALLBACK_SCSV check.
  • Lower some timeouts from 5 to 2.

1.9

  • Add navigation menu
  • Add green color if HSTS/HPKP headers are available.
  • Partial fix to make IDN's work instead of fail.
  • Fix issue with OCSP validation and HTTP 1.1 (StartCOM)
  • Fix CRL validation issue for self signed CRL URI's
  • Fix http header case sensitive validation (HSTS, HPKP)
  • Fix OCSP status display
  • Relicense under Affero GPL

1.8

  • Add certificate chain validation.
  • Make some chiphersuites red.

1.7

  • Split code up in seperate files
  • Add SPKI hash

1.6

  • Remove JSON output
  • Add ciphersuite enumeration

1.5

  • Fix bug in CSR page rendering

  • Fix a few PHP warnings by better checking input parameters

  • Add PEM display of cert and pubkey

  • Add result page saving

  • Add AJAX form loader

1.4

  • Fix bug where HSTS and HPKP would not work if host was IP

  • Fix bug where downloaded CRL file would be empty

  • Fix bug where hostname verification would fail if SAN has "othername:"

  • Add OCSP stapling support

  • Improve OCSP validation result parsing

  • Improve CRL validation error message