Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sites upgraded to https fail if 'only in scope' switched on #316

Closed
psiinon opened this issue Dec 27, 2018 · 2 comments · Fixed by #638
Closed

Sites upgraded to https fail if 'only in scope' switched on #316

psiinon opened this issue Dec 27, 2018 · 2 comments · Fixed by #638
Labels
bug
Milestone
0.8.0

Comments

@psiinon
Copy link
Member

psiinon commented Dec 27, 2018

Start using the HUD with an HTTP based site, but dont add it to the scope. The HUD will upgrade it to HTTPS.
Turn on the 'Enable the HUD only for URLs that are in scope' option.
The site will then fail with "Unrecognized SSL message, plaintext connection?" errors.
This is pretty confusing, especially for newcomers.
(Thanks mum: https://twitter.com/psiinon/status/1077890840142450689 ;)
@psiinon psiinon added the bug label Dec 27, 2018
@dscrobonia
Copy link
Contributor

Great find! More usability tests!

@manteca
Copy link

manteca commented Nov 18, 2019

Got the same error problem.
Error message:

An exception occurred while attempting to connect to: https://localhost:5000/login/
The exception was:
Remote host closed connection during handshake
Root cause:
EOFException: SSL peer shut down incorrectly

I disable the option 'Enable the HUD only for URLs that are in scope' and everything work again.

ZAP v.2.8.0

psiinon added a commit to psiinon/zap-hud that referenced this issue Nov 21, 2019
@psiinon
Handle sites that fail when 'only in scope' switched on
9f84c1e 
Fixes zaproxy#316
psiinon added a commit to psiinon/zap-hud that referenced this issue Nov 22, 2019
@psiinon
Handle sites that fail when 'only in scope' switched on
a77b838 
Fixes zaproxy#316
psiinon added a commit to psiinon/zap-hud that referenced this issue Nov 22, 2019
@psiinon
Handle sites that fail when 'only in scope' switched on
1f3d0e3 
Fixes zaproxy#316

Signed-off-by: Simon Bennetts <[email protected]>
@psiinon psiinon mentioned this issue Nov 22, 2019
Merged
psiinon added a commit to psiinon/zap-hud that referenced this issue Nov 22, 2019
@psiinon
Handle sites that fail when 'only in scope' switched on
84a99b6 
Fixes zaproxy#316

Signed-off-by: Simon Bennetts <[email protected]>
@thc202 thc202 added this to the 0.8.0 milestone Nov 22, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Milestone
0.8.0
Development

Successfully merging a pull request may close this issue.

Handle sites that fail when 'only in scope' switched on psiinon/zap-hud
4 participants
@manteca @psiinon @thc202 @dscrobonia