# Installer testssl avec Homebrew, dnf, MacPorts, Nix, apt, pacman, zypper

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de testssl pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:testssl
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install testssl
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install testssl
```

  Preuve: MacPorts ports tree: security/testssl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- dnf (92%):

```sh
sudo dnf install testssl
```

  Preuve: Fedora Rawhide package metadata: testssl from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#testssl
```

  Preuve: nixpkgs package indexes: pkgs/by-name/te/testssl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- Debian apt (92%):

```sh
sudo apt install testssl.sh
```

  Preuve: Debian stable package indexes: testssl.sh from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- pacman (92%):

```sh
sudo pacman -S testssl.sh
```

  Preuve: Arch Linux sync databases: testssl.sh from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install testssl.sh
```

  Preuve: openSUSE Tumbleweed package metadata: testssl.sh from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## Faits du paquet

- **Clé du paquet:** brew:testssl
- **Gestionnaire de paquets:** Homebrew
- **Version:** 3.2.4
- **Résumé source:** Tool which checks for the support of TLS/SSL ciphers and flaws
- **Page d'accueil:** <https://testssl.sh/>
- **Dépôt:** <https://github.com/testssl/testssl.sh>
- **Dernière mise à jour:** 2026-07-12T21:25:00Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- testssl.sh (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 3.2.4
## Historique du projet et usages

testssl.sh is a free Bash command-line scanner for checking TLS and SSL services on any port, including supported protocols, ciphers, certificate properties, security headers, and known cryptographic flaws.

### Historique du projet

The testssl/testssl.sh repository was created in July 2014 and official GitHub releases show a long public release history, including version 2.6 in 2015, 2.8 in 2017, the 3.0 line in 2020 and 2021, and the 3.2 stable line in 2025 and 2026.

The README describes testssl.sh as a no-install-or-configuration tool: no gems, CPAN, pip, or similar runtime stack are needed, and it runs out of the box on Linux, macOS, BSD systems, WSL2, MSYS2, and Cygwin. That packaging profile helped it become a common audit utility in Unix security toolboxes.

The changelog shows the project expanding from cipher and protocol checks into broader TLS operations: STARTTLS support, JSON and CSV output, browser/client simulations, certificate and CA checks, TLS 1.3, Docker images, GHCR builds, SSL Labs-style ratings, post-quantum and newer cipher handling, and mass-testing improvements.

### Historique d'adoption

testssl.sh's adoption pattern is visible in its official README: it lists related frontends, mass scanners, privacy checkers, Nagios and Icinga integrations, GitHub Actions, JSON processors, and a Homebrew package discussion. These are signs of a tool used both interactively by security engineers and as a building block in automated checks.

The batch input also shows broad package-manager coverage: Homebrew, Debian, Ubuntu, Fedora/dnf, MacPorts, Nix, Arch/pacman, and openSUSE/zypper. That matters because TLS scanners are often run from ephemeral audit machines, CI jobs, or administrator laptops where quick package installation is the workflow.

### Modes d'utilisation

The normal interactive use is testssl.sh <hostname>, which performs a default scan of a host or URI. The usage documentation also covers per-protocol cipher checks, vulnerability checks such as Heartbleed, CCS injection, POODLE, FREAK, LOGJAM, DROWN, and ROBOT-related coverage, HTTP header checks, STARTTLS protocols, MX scans, proxy use, and IPv6.

For automation, testssl.sh supports batch input with --file, machine-readable JSON and CSV output, log files, append mode, warning suppression for batch runs, and Docker execution. Those features explain why it appears in package-manager catalogs and CI/security pipelines rather than only in penetration-testing notes.

### Pourquoi les passionnés de paquets s'y intéressent

testssl.sh is a package-nerd classic because it is a single command with heavy operational value: install it, point it at a host, and get a broad TLS posture report without setting up a web service or sending results to a third party.

Its Bash implementation and bundled compatibility work put it in the same mental shelf as nmap helper scripts, OpenSSL wrappers, and admin audit tools. Distribution packages make it easy to pin or update across fleets, CI runners, and responder laptops.

### Chronologie

- 2014: testssl/testssl.sh repository created on GitHub.
- 2015: Version 2.6 released, with mass-testing file option and expanded TLS checks.
- 2017: Version 2.8 released, adding features such as trust-chain checks, JSON and CSV logging, HTTP/2 ALPN checks, and DROWN checks.
- 2020-2021: Version 3.0 line released, adding TLS 1.3 support, better JSON output, Docker support, STARTTLS improvements, and more robustness.
- 2025: Version 3.2.0 released as a stable line.
- 2026: Version 3.2.3 marked latest in official GitHub releases, with 3.3 development snapshots also published.

### Related projects

- OpenSSL, LibreSSL, STARTTLS services, SSL Labs-style ratings, Docker and GHCR images, Nagios and Icinga checks, GitHub Actions, mass-scanning wrappers, and TLS vulnerability test suites.

### Sources

- <https://github.com/testssl/testssl.sh CHANGELOG.md>
- <https://github.com/testssl/testssl.sh Readme.md>
- <https://github.com/testssl/testssl.sh repository metadata>
- <https://github.com/testssl/testssl.sh/wiki/Usage-Documentation>
- input.source_facts.package-manager
- official GitHub release list for testssl/testssl.sh


## Notes de sécurité

Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour testssl. Les métadonnées de paquet Nucleus restent publiées ici afin que la couverture future dispose d'une URL stable.


## Autres enregistrements de gestionnaires de paquets

- Nix - testssl: normalized package name match | nixpkgs package indexes: pkgs/by-name/te/testssl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- dnf - testssl - 3.2.3-3.fc45: normalized package name match | Fedora Rawhide package metadata: testssl from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Testing TLS/SSL encryption | https://testssl.sh/
- MacPorts - testssl: normalized package name match | MacPorts ports tree: security/testssl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Debian apt - testssl.sh - 3.2.1+dfsg-1: installed executable or alias match | Debian stable package indexes: testssl.sh from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Command line tool to check TLS/SSL ciphers, protocols and cryptographic flaws | https://testssl.sh/
- Ubuntu apt - testssl.sh - 3.2~rc3+dfsg-1: installed executable or alias match | Ubuntu 24.04 LTS package indexes: testssl.sh from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Command line tool to check TLS/SSL ciphers, protocols and cryptographic flaws | https://testssl.sh/
- pacman - testssl.sh - 3.2.4-1: installed executable or alias match | Arch Linux sync databases: testssl.sh from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Testing TLS/SSL encryption | https://github.com/testssl/testssl.sh
- zypper - testssl.sh - 3.2.4-1.1: installed executable or alias match | openSUSE Tumbleweed package metadata: testssl.sh from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Testing TLS/SSL Encryption Anywhere On Any Port | https://testssl.sh


## Combined YAML source

View the package source record on GitHub. [combined/testssl.yml](https://github.com/mxcl/pkgdb/blob/main/combined/testssl.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph