From d36757551152558db540456630af93160068d8dd Mon Sep 17 00:00:00 2001 From: Dirk Wetter Date: Tue, 2 Sep 2025 15:29:06 +0200 Subject: [PATCH 1/4] Start over with FAQ ... see #2685 --- FAQ.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 FAQ.md diff --git a/FAQ.md b/FAQ.md new file mode 100644 index 0000000..a131a82 --- /dev/null +++ b/FAQ.md @@ -0,0 +1,29 @@ +### FAQs + +This is a collection of frequently asked questions which should help to answer some of those or gain some insights. It could be helpful reading before filing issues. + +#### Coding + +* Why are you using bash, everybody nowadays uses (python|Golang|Java|etc), it's much faster and modern! + * The project started in 2007 as series of OpenSSL commands in a shell script which was used for pen testing. OpenSSL then was the central part (and partly is) to do some basic operations for connections and certificates verification which would have been more tedious to implement in other programming languages. Over time the project became bigger and it in terms of resources it wasn't a viable option to convert it to (python|Golang|Java|etc). Besides, bash is easy to debug as opposed to a compiled binary. Personally, I believe its capabilities are often underestimated. + +* But why don't you now amend it with a (python|perl|Golang|Java|etc) function which does \ or \ much faster? + * The philosophy and the beauty of testssl.sh is that it runs *everywhere* with a minimal set of dependencies like typical Unix binaries. No worries about having a different version of libraries/ interpreter not installed. + + +#### Runtime + +* I believe I spotted a false positive as testssl.sh complained about a finding \ but my OpenSSL command `openssl s_client -connect -cipher 'DEFAULT@SECLEVEL=0' Date: Tue, 2 Sep 2025 15:31:38 +0200 Subject: [PATCH 2/4] typo / omitting few words --- FAQ.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/FAQ.md b/FAQ.md index a131a82..6234910 100644 --- a/FAQ.md +++ b/FAQ.md @@ -1,6 +1,6 @@ ### FAQs -This is a collection of frequently asked questions which should help to answer some of those or gain some insights. It could be helpful reading before filing issues. +This is a collection of frequently asked questions which should help to answer some of those. It is is recommended reading this before filing issues. #### Coding @@ -19,8 +19,7 @@ This is a collection of frequently asked questions which should help to answer s * Will you backport TLS 1.3, QUIC or some other modern crypto to the supplied OpenSSL-bad version? * That is not going to happen as it's more resource efficient use the vendor supplied version and compensate deficiencies with either the OpenSSL-bad version or with bash sockets as/where we see it fit. - * Also likely there won't be another set of compiled binaries --unless the sky falls on our head. - + * Also likely there won't be another set of compiled binaries --unless the sky falls on our heads. * Where can I find infos about "your" OpenSSL version? * Source code, documentation and license see [here](https://github.com/testssl/openssl-1.0.2.bad). You may use it for testing. But don't use it in production on a server or as a client in any other context like testssl.sh! From b1a7c287e8c8ecf2fd0ec27b988cc11e45005626 Mon Sep 17 00:00:00 2001 From: Dirk Wetter Date: Tue, 2 Sep 2025 15:40:54 +0200 Subject: [PATCH 3/4] Include the FAQ --- .github/ISSUE_TEMPLATE/other-issues---question.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/other-issues---question.md b/.github/ISSUE_TEMPLATE/other-issues---question.md index 490a660..aaad44a 100644 --- a/.github/ISSUE_TEMPLATE/other-issues---question.md +++ b/.github/ISSUE_TEMPLATE/other-issues---question.md @@ -7,5 +7,12 @@ assignees: '' --- -**Which version are you referring to** -3.0.x or 3.2? (please check also how old your version is compare to the ones here) +**Which version are you referring to?** + + +**Did you read the [FAQ](https://github.com/testssl/testssl.sh/blob/3.3dev/FAQ.md)?** + From 0d8150e0881ee2f6776e1da9dd97b1609ce07944 Mon Sep 17 00:00:00 2001 From: Dirk Wetter Date: Tue, 2 Sep 2025 15:43:28 +0200 Subject: [PATCH 4/4] add faq to changes --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index c199921..3179260 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,7 @@ * Bump SSLlabs rating guide to 2009r * Check for Opossum vulnerability * Enable IPv6 automagically, i.e. if target via IPv6 is reachable just (also) scan it +* Provide an FAQ ### Features implemented / improvements in 3.2