diff --git a/net-analyzer/testssl/Manifest b/net-analyzer/testssl/Manifest
index bfea93d8e..58eb7b165 100644
--- a/net-analyzer/testssl/Manifest
+++ b/net-analyzer/testssl/Manifest
@@ -1,2 +1,2 @@
-DIST testssl-3.2.1.tar.gz 6978887 BLAKE2B ecbc5481b60c02ce51ccd6669880c1d755896fc67edead72e39b12046048b44799f0449267e77266c4b25fcc6ab547be6f9d715f10dd6c6704f5c9187ab02418 SHA512 d8dfe4ca6157668d2fecc72fa15dde77e557ae3230698068454aea957ff01b94c751c5f267da8b97d702b35718274726f1d520b88c5357e6ff4c9298f955ffb8
 DIST testssl-3.2.2.tar.gz 6985625 BLAKE2B 00657a696d99be8a9ccea13920b169c906b1df037e910b1e1f0a3079c3993e33bc91c9eea1702bf0afa435cadb918ed848390dca6ece2ffd5695efd85ea251be SHA512 17c25d6af08c10c1c49ff3ae6487a10e9a49273e9e100e7f2da71f369392d9be27cf6f624cd55f85c7dfb95d8900b970e62ebf195b0e8bd3ba2b2aad2e484143
+DIST testssl-3.2.3.tar.gz 6996856 BLAKE2B ebf8d194c6220fe0273d9f6138fb1b2a3b2194a6eb3f47e548d4bb1cd7b3fe441f038748e8e6547c3b8e19dab1514fdde7f19441f6db4fb6bfe1ff9c8d815d34 SHA512 9b7889fbcf0a870333a5ff24e9fc10d159289f4b27ffcc427e924bc0354b8087e995c451a16e4eb1d0693a476075da433ffa3f9a1e3f1a5d603e506754db0898
diff --git a/net-analyzer/testssl/testssl-3.2.1.ebuild b/net-analyzer/testssl/testssl-3.2.3.ebuild
similarity index 73%
rename from net-analyzer/testssl/testssl-3.2.1.ebuild
rename to net-analyzer/testssl/testssl-3.2.3.ebuild
index a9748da07..db2474344 100644
--- a/net-analyzer/testssl/testssl-3.2.1.ebuild
+++ b/net-analyzer/testssl/testssl-3.2.3.ebuild
@@ -1,12 +1,17 @@
-# Copyright 1999-2022 Gentoo Authors
+# Copyright 2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
 
+inherit optfeature
+
+MY_PN="${PN}.sh"
+MY_PV="${PV/_p/-}"
+
 DESCRIPTION="Tool to check TLS/SSL cipher support"
 HOMEPAGE="https://testssl.sh/"
-SRC_URI="https://github.com/drwetter/testssl.sh/archive/refs/tags/v${PV}.tar.gz -> ${P}.tar.gz"
-S="${WORKDIR}/testssl.sh-${PV}"
+SRC_URI="https://github.com/${PN}/${MY_PN}/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz"
+S=${WORKDIR}/${MY_PN}-${MY_PV}
 
 LICENSE="GPL-2 bundled-openssl? ( openssl )"
 SLOT="0"
@@ -18,11 +23,17 @@ REQUIRED_USE="bundled-openssl? ( || ( amd64 x86 ) )"
 # bundled-openssl has 183 ciphers
 # openssl (gentoo) 80 ciphers only
 RDEPEND="
-	app-shells/bash[net]
-	net-dns/bind-tools
+	app-alternatives/awk
+	>=app-shells/bash-3.2[net]
+	sys-apps/coreutils
+	sys-apps/grep
 	sys-apps/util-linux
-	sys-libs/ncurses:0
+	sys-libs/ncurses
 	sys-process/procps
+	|| (
+		net-dns/bind
+		net-libs/ldns
+	)
 	bundled-openssl? (
 		kerberos? (
 			sys-libs/zlib
@@ -72,6 +83,11 @@ src_install() {
 
 	if use bundled-openssl; then
 		exeinto /opt/${PN}
-		use amd64 && doexe bin/${BUNDLED_OPENSSL}
+		doexe bin/${BUNDLED_OPENSSL}
 	fi
 }
+
+pkg_postinst() {
+	optfeature "Check for STARTTLS injection issues" net-misc/socat
+	optfeature "Faster conversions from hexdump to binary" dev-util/xxd app-editors/vim-core
+}