CLI v1.10 changes
CLI v1.1.0•July 7, 2026
Fixes
-C cert-info couldn't show broken certificates (real bug)
- Before: on an expired/invalid cert,
-Calways returnedFailed to send request— even with-k. The whole point of a cert-inspection tool is to see the broken cert. - After:
-Cnow inspects the certificate without needing a successful, trusted connection. Expired, self-signed, and hostname-mismatch certificates are displayed — and even when the connection ultimately fails, the certificate is still captured and shown.
Assertion failure message was hard to read
- Before:
Status equals failed. Got: 200, Expected: 404— the assertion name ran into the word "failed". - After:
Status equals 404 → Got: 200(exit code 1 preserved).
Improvements
Cert Validation section (new)
-C output now includes a Validation block computed from the parsed certificate (no extra network request):
- Status:
✓ Valid (expires in N days)/✗ EXPIRED N days ago/✗ Not yet valid - Hostname: SAN (with
*.wildcard) and CN matching →✓ Matches/✗ MISMATCH (cert for ...) - Trust: self-signed detection
- Colored: green when valid, red when problematic.
--json timing breakdown
The timing object now includes a per-phase breakdown alongside total_ms: dns_ms, tcp_ms, tls_ms, request_send_ms, server_response_ms, download_ms. Values are at microsecond precision (3 decimals). Backward compatible (existing fields preserved).
-v verbose is actually verbose now
- Real sent headers: verbose now shows the headers atra effectively sends (
Host,User-Agent,Accept,Accept-Encoding,Content-*, …), not just the ones the user passed. - Compact timing line: a one-liner at the end —
Timing: DNS … · TCP … · TLS … · Server … · Download …(same auto units as-t).
Clearer TLS error message
When the server doesn't return a valid TLS response, instead of a cryptic low-level error you now get a clear hint:
server did not return a valid TLS response — a proxy, firewall, or captive portal may be intercepting the connection (...)
User-Agent tracks the version
Atrahasis CLI/1.0 → Atrahasis CLI/1.1.0, now kept in sync with the release version.