Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

lscert | Add support for following redirect from 80/tcp to discover certificate chain #372

Open
atc0005 opened this issue Jul 12, 2022 · 0 comments
Assignees
Labels
Milestone

Comments

@atc0005
Copy link
Owner

atc0005 commented Jul 12, 2022

For example, assume that the destination https-enabled port is 9192/tcp and not 443/tcp. Let's also assume that 80/tcp is open and that the web server issues a redirect to https://FQDN:9192/.

If you use the default port of 443/tcp the cert retrieval attempt will eventually timeout. Without knowing that 9192/tcp is the intended port, lscert will be unable to retrieve the certificate chain.

If a flag were added such as --follow or --location a http GET request could be submitted to 80/tcp and any redirects followed (within reason) to allow retrieval of the certificate chain.

@atc0005 atc0005 added enhancement New feature or request config app/lscert labels Jul 12, 2022
@atc0005 atc0005 added this to the Future milestone Jul 12, 2022
@atc0005 atc0005 self-assigned this Jul 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant