Alexey Chernyak

--always-force-new-domain-key should pre-generate the future domain key pair

14

`--always-force-new-domain-key` should pre-generate the future (next) domain key pair after the new certificate is provisioned, so that `--reloadcmd` can update TLSA records in advance of obtaining future certificates as part...

Detect standard ALPN protocol IDs

6

**Which version are you referring to** 3.2rc2 (default 3.1dev branch) **Describe your feature request (if it's a technical feature)** `testssl.sh` should detect all standard ALPN Protocol IDs. **If your feature...

[Feature request] Report JA3 cleint and JA3/S server TLS fingerprints when running client simulations

2

**Which version are you referring to** 3.2rc2 (default 3.1dev branch) **Describe your feature request (if it's a technical feature)** In the **Running client simulations via sockets** section report JA3 client...

[Feature request] Report JARM server TLS fingerprints

1

**Which version are you referring to** 3.2rc2 (default 3.1dev branch) **Describe your feature request (if it's a technical feature)** Report server's JARM TLS fingerprint. https://github.com/salesforce/jarm **Describe the solution you'd like**...

hid_ginput crash with 3.13 and 3.14 kernels on start of g15 client utilities

7

Using your gnome15 overlay on kernels 3.13 and 3.14 with this ebuild: sys-kernel/lg4l-kernel-module-20130906-r1::gnome15 Relevant boot dmesg output (seems allright?): ``` # egrep -i 'gnome15|hid|G19' /var/log/messages kernel: hidraw: raw HID events...

DnssecResolverApi.getClient() returns insecure dnsClient

10

The `DnssecResolverApi` class extends the `ResolverApi` and creates its own `DnssecClient` with its own secure separate cache, but it never overrides the inherited `getClient()` function. https://github.com/MiniDNS/minidns/blob/master/minidns-hla/src/main/java/org/minidns/hla/DnssecResolverApi.java#L29 So the inherited `DnssecResolverApi.getClient()`...