Skip to content

[Feature request] Support for TLS extension #50 #2686

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
meghhak opened this issue Mar 10, 2025 · 3 comments
Closed

[Feature request] Support for TLS extension #50 #2686

meghhak opened this issue Mar 10, 2025 · 3 comments

Comments

@meghhak
Copy link

meghhak commented Mar 10, 2025

Which version are you referring to

3.2

Describe your feature request (if it's a technical feature)

If your feature request otherwise is related to a usage problem, please describe it

Unknown TLS extension were detected during cipher assessment since testssl.sh does not support this extension yet.

Image

Image

@drwetter
Copy link
Collaborator

drwetter commented Mar 10, 2025

thanks, @meghhak .

That would be easy to add. But allow me the question: Where did you get that version from? The message 'testssl found an unknown extension" is not from this project

@dcooper16
Copy link
Collaborator

# 50 is the signature_algorithms_cert extension, and work to add support for this extension is in progress (#2481).

Is the server you tested against publicly available? There aren't many servers that support the signature_algorithms_cert extension. So, having one to test against would be helpful.

@drwetter drwetter mentioned this issue Mar 11, 2025
13 tasks
drwetter added a commit that referenced this issue Mar 11, 2025
Issue #2686 showed a server which listed an unknown extension number from
RFC 8446. THis PR adds this number and a few (later) ones.

It just lists them when detected in `parse_tls_serverhello()`

See also https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml
@drwetter
Copy link
Collaborator

@dcooper16 : I was referring more to the extension number(s) in the server hello, as a start

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants