CLI v1.10 changes

CLI v1.1.0July 7, 2026

Fixes

-C cert-info couldn't show broken certificates (real bug)

  • Before: on an expired/invalid cert, -C always returned Failed to send request — even with -k. The whole point of a cert-inspection tool is to see the broken cert.
  • After: -C now inspects the certificate without needing a successful, trusted connection. Expired, self-signed, and hostname-mismatch certificates are displayed — and even when the connection ultimately fails, the certificate is still captured and shown.

Assertion failure message was hard to read

  • Before: Status equals failed. Got: 200, Expected: 404 — the assertion name ran into the word "failed".
  • After: Status equals 404 → Got: 200 (exit code 1 preserved).

Improvements

Cert Validation section (new)

-C output now includes a Validation block computed from the parsed certificate (no extra network request):

  • Status: ✓ Valid (expires in N days) / ✗ EXPIRED N days ago / ✗ Not yet valid
  • Hostname: SAN (with *. wildcard) and CN matching → ✓ Matches / ✗ MISMATCH (cert for ...)
  • Trust: self-signed detection
  • Colored: green when valid, red when problematic.

--json timing breakdown

The timing object now includes a per-phase breakdown alongside total_ms: dns_ms, tcp_ms, tls_ms, request_send_ms, server_response_ms, download_ms. Values are at microsecond precision (3 decimals). Backward compatible (existing fields preserved).

-v verbose is actually verbose now

  • Real sent headers: verbose now shows the headers atra effectively sends (Host, User-Agent, Accept, Accept-Encoding, Content-*, …), not just the ones the user passed.
  • Compact timing line: a one-liner at the end — Timing: DNS … · TCP … · TLS … · Server … · Download … (same auto units as -t).

Clearer TLS error message

When the server doesn't return a valid TLS response, instead of a cryptic low-level error you now get a clear hint:

server did not return a valid TLS response — a proxy, firewall, or captive portal may be intercepting the connection (...)

User-Agent tracks the version

Atrahasis CLI/1.0Atrahasis CLI/1.1.0, now kept in sync with the release version.