Index: head/security/testssl.sh/Makefile
===================================================================
--- head/security/testssl.sh/Makefile	(revision 466942)
+++ head/security/testssl.sh/Makefile	(revision 466943)
@@ -1,40 +1,40 @@
 # $FreeBSD$
 
 PORTNAME=	testssl.sh
 DISTVERSIONPREFIX=	v
-DISTVERSION=	2.9.5-3
+DISTVERSION=	2.9.5-4
 CATEGORIES=	security
 
 MAINTAINER=	tobik@FreeBSD.org
 COMMENT=	Test TLS/SSL encryption anywhere on any port
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	bash:shells/bash \
 		${LOCALBASE}/openssl-unsafe/bin/openssl:security/openssl-unsafe
 
 USES=		shebangfix
 USE_GITHUB=	yes
 GH_ACCOUNT=	drwetter
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 
 SHEBANG_FILES=	testssl.sh utils/*
 
 post-patch:
 	@${REINPLACE_CMD} -e '/elif test_openssl_suffix/d' \
 		-e 's@OPENSSL=PREFIX@OPENSSL=${PREFIX}@' \
 		-e 's@$${TESTSSL_INSTALL_DIR:-""}@$${TESTSSL_INSTALL_DIR:-"${DATADIR}"}@' \
 		-e '/check_bsd_mount$$/d' \
 		${WRKSRC}/testssl.sh
 
 do-install:
 	${INSTALL_SCRIPT} ${WRKSRC}/testssl.sh ${STAGEDIR}${PREFIX}/bin
 	${INSTALL_MAN} ${WRKSRC}/doc/testssl.1 ${STAGEDIR}${MAN1PREFIX}/man/man1
 	@${MKDIR} ${STAGEDIR}${DATADIR}/etc ${STAGEDIR}${DATADIR}/utils
 	@cd ${WRKSRC}/etc && ${COPYTREE_SHARE} . ${STAGEDIR}${DATADIR}/etc
 	@cd ${WRKSRC}/utils && ${COPYTREE_SHARE} . ${STAGEDIR}${DATADIR}/utils
 
 .include <bsd.port.mk>
Index: head/security/testssl.sh/distinfo
===================================================================
--- head/security/testssl.sh/distinfo	(revision 466942)
+++ head/security/testssl.sh/distinfo	(revision 466943)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1521967012
-SHA256 (drwetter-testssl.sh-v2.9.5-3_GH0.tar.gz) = 03abee78d1373098b2a99766bc57cf498e0d9ddaf8b9eb3389fac2540fd5af0d
-SIZE (drwetter-testssl.sh-v2.9.5-3_GH0.tar.gz) = 8955546
+TIMESTAMP = 1523347210
+SHA256 (drwetter-testssl.sh-v2.9.5-4_GH0.tar.gz) = 5163f76d40acfe404d65145c498cbe8fb716bb49119e8d0773e063203cff9c03
+SIZE (drwetter-testssl.sh-v2.9.5-4_GH0.tar.gz) = 9017058
Index: head/security/testssl.sh/files/patch-testssl.sh
===================================================================
--- head/security/testssl.sh/files/patch-testssl.sh	(revision 466942)
+++ head/security/testssl.sh/files/patch-testssl.sh	(revision 466943)
@@ -1,21 +1,12 @@
 --- testssl.sh.orig	2018-03-17 15:02:25 UTC
 +++ testssl.sh
 @@ -175,6 +175,9 @@ TERM_CURRPOS=0                          
  ## CONFIGURATION PART ##
  # following variables make use of $ENV, e.g. OPENSSL=<myprivate_path_to_openssl> ./testssl.sh <host>
  # 0 means (normally) true here. Some of the variables are also accessible with a command line switch, see --help
 +if [[ -z "$OPENSSL" ]] ; then
 +     OPENSSL=PREFIX/openssl-unsafe/bin/openssl
 +fi
  declare -x OPENSSL OPENSSL_TIMEOUT
  FAST_SOCKET=${FAST_SOCKET:-false}       # EXPERIMENTAL feature to accelerate sockets -- DO NOT USE it for production
  COLOR=${COLOR:-2}                       # 2: Full color, 1: b/w+positioning, 0: no ESC at all
-@@ -6221,7 +6224,7 @@ certificate_info() {
-           # best we are able to do under OpenBSD
-           days2expire=""
-      else
--          days2expire=$(( $(parse_date "$enddate" "+%s" "%F %H:%M %z") - $(LC_ALL=C date "+%s") ))    # in seconds
-+          days2expire=$(( $(parse_date "$enddate" "+%s" "%F %H:%M") - $(LC_ALL=C date "+%s") ))    # in seconds
-           days2expire=$((days2expire  / 3600 / 24 ))
- 
-           if grep -q "^Let's Encrypt Authority" <<< "$issuer_CN"; then          # we take the half of the thresholds for LE certificates