Skip to content

Commit 62d0321

Browse files
committed
Add missing TLS signature schemes
This commit adds a few TLS signature schemes that were not added to certificate_transparency() in the 3.2 branch.
1 parent 2f69d24 commit 62d0321

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

testssl.sh

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9000,9 +9000,13 @@ certificate_transparency() {
90009000
if [[ "$tls_version" == 0304 ]]; then
90019001
ciphers=", 13,01, 13,02, 13,03, 13,04, 13,05, c0,b4, c0,b5"
90029002
if [[ "$cipher" == tls1_3_RSA ]]; then
9003-
extra_extns=", 00,0d,00,10,00,0e,08,04,08,05,08,06,04,01,05,01,06,01,02,01"
9003+
extra_extns=", 00,0d,00,16,00,14,08,04,08,05,08,06,04,01,05,01,06,01,02,01,08,09,08,0a,08,0b"
90049004
elif [[ "$cipher" == tls1_3_ECDSA ]]; then
90059005
extra_extns=", 00,0d,00,0a,00,08,04,03,05,03,06,03,02,03"
9006+
elif [[ "$cipher" == tls1_3_EdDSA ]]; then
9007+
extra_extns=", 00,0d,00,06,00,04,08,07,08,08"
9008+
elif [[ "$cipher" == tls1_3_MLDSA ]]; then
9009+
extra_extns=", 00,0d,00,08,00,06,09,04,09,05,09,06"
90069010
else
90079011
return 1
90089012
fi

0 commit comments

Comments
 (0)