[Feature request] Support for TLS extension #50

[meghhak]

Which version are you referring to

3.2

Describe your feature request (if it's a technical feature)

If your feature request otherwise is related to a usage problem, please describe it

Unknown TLS extension were detected during cipher assessment since testssl.sh does not support this extension yet.

[drwetter]

thanks, @meghhak .

That would be easy to add. But allow me the question: Where did you get that version from? The message 'testssl found an unknown extension" is not from this project

[dcooper16]

# 50 is the signature_algorithms_cert extension, and work to add support for this extension is in progress (#2481).

Is the server you tested against publicly available? There aren't many servers that support the signature_algorithms_cert extension. So, having one to test against would be helpful.

[drwetter]

@dcooper16 : I was referring more to the extension number(s) in the server hello, as a start

[Peregrine90]

Using testssl version 3.2.1, I still get extension "unknown/#50".

The server producing this result is not publicly available and I can't share the full testssl output, as it contains sensitive information.

Could you please reopen this issue?
Please let me know it there is anything else I can provide, to help with this.

[drwetter]

Sorry, my bad that I closed this. The PR is still a draft and hasn't been merged as there's still work to do.

You could go there and try.

[Peregrine90]

Thank you!

Would it also be possible to delete the first screenshot in OP's initial request?
The email in that screenshot is unintended information disclosure, we are sorry for the inconvenience.

[drwetter]

done but that was likely cached some place else.

Change topic: For bigger companies using this piece of software it would be much appreciated if you could sponsor the work on this, see e.g https://testssl.sh/#donations . That will help me to prioritize working on this.

[Peregrine90]

Thank you very much, we appreciate you!
I will see if I can do anything about that.