
=    Alias (regex)          | command or option   # used by ...
=---------------------------+------------------------------------------------------------
-t                           --starttls           # testssl.sh
-b                           --enabled            # ssl-cert-check
-c                           --capath             # ssldiagnose.exe
--?CApath                    --capath             # curl, openssl
--?CAfile                    --cafile             # openssl
--ca(cert(ificate)?)         --cafile             # curl, openssl, wget, ...
--cadirectory                --capath             # curl, openssl, wget, ...
--fuzz                       --cipherrange        # sslmap
--httpget                    --http               # sslyze
--httpstunnel                --proxyhost          # sslyze
--hiderejectedciphers        --nodisabled         # sslyze
--regular                    --http               # sslyze
--?interval                  --timeout            # ssldiagnos.exe
--?nofailed                  --enabled            # sslscan
--show-?each                 --disabled           # testssl.sh
--(no|ignore)cmd             --ignoreout          # 
--protocol                   --SSL                # ssldiagnose.exe
--range                      --cipherrange        # 
--?servername                --sniname            # openssl
-(e|-each-?cipher)           +cipher              # testssl.sh
-(E|-cipher-?perproto)       +cipher              # testssl.sh
-(f|-ciphers)                +ciphercheck         # testssl.sh (+ciphercheck defined in .o-saft.pl)
-(x|-single-cipher)          CIPHER_ITEM          # testssl.sh (must be used together with +cipher)
-(p|-protocols)              +protocols           # testssl.sh
-(y|-spdy)                   +spdy                # testssl.sh
-(Y|-http2)                  +spdy                # testssl.sh
-(U|-vulnerable)             +vulns               # testssl.sh
-(B|-heartbleed)             +heartbleed          # testssl.sh
-(I|-ccs(-?injection))       +ccs                 # testssl.sh
-(C|-compression|-crime)     +compression         # testssl.sh
-(T|-breach)                 +breach              # testssl.sh
-(O|-poodle)                 +poodle              # testssl.sh
-(F|-freak)                  +freak               # testssl.sh
-(A|-beast)                  +beast               # testssl.sh
-(BB|-robot)                 +robot               # testssl.sh
-(J|-logjam)                 +logjam              # testssl.sh
-(D|-drown)                  +drown               # testssl.sh
-(Z|-tls-fallback)           +fallback_protocol   # testssl.sh
-(s|4)                       +pfs                 # testssl.sh
--(p?fs|nsa)                 +pfs                 # testssl.sh
--(rc4|appelbaum)            +pfs                 # testssl.sh
-R                           +renegotiation       # testssl.sh
--reneg(otiation)?           +renegotiation       # sslyze, testssl.sh
--resum(ption)?              +resumption          # sslyze
--chain                      +chain               # 
--default                    +default             # 
--fingerprint                +fingerprint         # 
--fips                       +fips                # 
-i                           +issuer              # ssl-cert-check
--ism                        +ism                 # ssltest.pl
--list                       +list                # ssltest.pl
--quit                       +quit                # 
--pci                        +pci                 # ssltest.pl
--printavailable             +ciphers             # ssldiagnose.exe
--printcert                  +text                # ssldiagnose.exe
--showkeys?                  --traceKEY           # 
--version                    +version             # various programs
--forceopenssl               --opensslciphers     # 
--cipheropenssl              --opensslciphers     # 
--sclient                    --opensslsclient     # 
--nosclient                  --noopensslsclient   # 
--sslnouseecc                --nossluseecc        # 
--sslnouseecpoint            --nossluseecpoint    # 
--sslnousereneg              --nosslusereneg      # 
--sslnodoublereneg           --nossldoublereneg   # 
--sslnodatanocipher          --nodataeqnocipher   # 
--sslnodataeqnocipher        --nodataeqnocipher   # 
--nosslnodataeqnocipher      --nosslnodatanocipher# 
--nomd5cipher                --nociphermd5        # used until VERSION 17.04.17
--md5cipher                  --ciphermd5          # used until VERSION 17.04.17
--ciphers?-?v                --v-ciphers          # 
--ciphers?--?v               --v-ciphers          # 
--dryrun                     --n                  # --n
--V                          opt-V                # for lazy people, not documented
--?comp(ression)?            --sslcompression     # 
--?nocomp(ression)?          --nosslcompression   # 
--traceexit                  --exitcode           # --exitcode
--exitcodesilent             --exitcode-quiet     # --exitcode-quiet
--notcp                      --notls              # 
--noudp                      --nodtls             # 
--tcp                        --tls                # 
--udp                        --dtls               # 
--quiet                      --silent             # 
+targets?                    +host                # print host and DNS information
+host$p                      +host                # until indiidual +host-* commands available
+http2                       +protocols           # HTTP/2.0; TODO: may be changed in future
+spdy                        +protocols           # spdy; TODO: may be changed in future
+spdy3                       +protocols           # SPDY/3.0; TODO: may be changed in future
+spdy31                      +protocols           # SPDY/3.1; TODO: may be changed in future
+spdy4                       +protocols           # SPDY/4.0; TODO: may be changed in future
+prots                       +protocols           # 
+tlsv10                      +tlsv1               # 
+dtlsv10                     +dtlsv1              # 
+ciphers?-adh                +cipher_adh          # 
+ciphers?-cbc                +cipher_cbc          # 
+ciphers?-des                +cipher_des          # 
+ciphers?-edh                +cipher_edh          # 
+ciphers?-exp                +cipher_exp          # 
+ciphers?-export             +cipher_exp          # 
+ciphers?-null               +cipher_null         # 
+ciphers?-weak               +cipher_weak         # 
+ciphers?-order              +cipher_order        # 
+ciphers?-strong             +cipher_strong       # 
+ciphers?-pfs                +cipher_pfs          # 
+ciphers?-pfsall             +cipher_pfsall       # 
+ciphers?-selected           +cipher_selected     # 
+ciphers-openssl             +ciphers_local       # for backward compatibility
+ciphers-local               +ciphers_local       # 
+ciphers?-defaults?          +cipher_default      # 
+ciphers?-dh                 +cipher_dh           # 
+cipher--?v                  +cipher              # shortcut for: +cipher --cipher-v
+adh-ciphers?                +cipher_adh          # backward compatibility < 17.06.17
+cbc-ciphers?                +cipher_cbc          # backward compatibility < 17.06.17
+des-ciphers?                +cipher_des          # backward compatibility < 17.06.17
+edh-ciphers?                +cipher_edh          # backward compatibility < 17.06.17
+exp-ciphers?                +cipher_exp          # backward compatibility < 17.06.17
+export-ciphers?             +cipher_exp          # backward compatibility < 17.06.17
+null-ciphers?               +cipher_null         # backward compatibility < 17.06.17
+weak-ciphers?               +cipher_weak         # backward compatibility < 17.06.17
+order-ciphers?              +cipher_order        # backward compatibility < 17.06.17
+strong-ciphers?             +cipher_strong       # backward compatibility < 17.06.17
+selected-ciphers?           +cipher_selected     # backward compatibility < 17.06.17
+session-ciphers?            +cipher_selected     # backward compatibility < 17.06.17
+selected                    +cipher_selected     # backward compatibility < 17.06.17
+adh                         +cipher_adh          # 
+cbc                         +cipher_cbc          # 
+des                         +cipher_des          # 
+edh                         +cipher_edh          # 
+exp                         +cipher_exp          # 
+export                      +cipher_exp          # 
+null                        +cipher_null         # 
+weak                        +cipher_weak         # 
+cve.?2009.?3555             +renegotiation       # 
+cve.?2011.?3389             +beast               # 
+cve.?2012.?4929             +crime               # 
+cve.?2013.?3587             +breach              # 
+cve.?2014.?0160             +heartbleed          # 
+cve.?2014.?0224             +ccs                 # 
+cve.?2014.?3566             +poodle              # 
+cve.?2015.?0204             +freak               # 
+cve.?2016.?0703             +drown               # 
+cve.?2015.?4000             +logjam              # 
+cve.?2013.?2566             +rc4                 # 
+cve.?2015.?2808             +rc4                 # 
+owner                       +subject             # 
+authority                   +issuer              # 
+expire                      +after               # 
+extension                   +extensions          # 
+sts                         +hsts                # 
+sigkey                      +sigdump             # 
+sigkey-algorithm            +signame             # 
+protocol                    +session_protocol    # # NOTE different to +protocols
+selected-protocol           +session_protocol    # 
+rfc-2818                    +rfc_2818_names      # 
+rfc-2818-names              +rfc_2818_names      # 
+rfc-6125                    +rfc_6125_names      # # TODO until check is improved (6/2015)
+rfc-6125-names              +rfc_6125_names      # 
+rfc-6797                    +hsts                # 
+rfc-7525                    +rfc_7525            # 
+fingerprint-(.{2,})         +fingerprint_        # 
+subject-altnames?           +altname             # 
+modulus-exponent-1          +modulus_exp_1       # 
+modulus-exponent-65537      +modulus_exp_65537   # 
+modulus-exponent-size       +modulus_exp_oldssl  # 
+pubkey-enc(ryption)?        +pub_encryption      # 
+public-enc(ryption)?        +pub_encryption      # 
+pubkey-enc(ryption)?-known  +pub_enc_known       # 
+public-enc(ryption)?-known  +pub_enc_known       # 
+sig(key)?-enc(ryption)?     +sig_encryption      # 
+sig(key)?-enc(ryption)?_known
                             +sig_enc_known       # 
+server-(temp)?-key          +dh_parameter        # 
+extended-master-secret      +master_secret       # 
+reneg                       +renegotiation       # 
+resum                       +resumption          # 
+reused?                     +resumption          # 
+commonName                  +cn                  # 
+cert(ificate)?              +pem                 # 
+issuer-X509                 +issuer              # 
+subject-X509                +subject             # 
+sha2sig(nature)?            +sha2signature       # 
+ext-aia                     +ext_authority       # AIA is a common acronym ...
+vulnerabilit(y|ies)         +vulns               # 
+hpkp                        +https_pins          # 
+pkp-pins                    +https_pins          # +pkp_pins before 19.12.19
=---------------------------+------------------------------------------------------------
= Note for names in  Alias  column:
=   For option names  - or _ characters are not shown, they are stripped anyway.
=   For command names - or _ characters are also possible, but only - is shown.

