Nmap Development mailing list archives

Re: Request: public key retrieval in nmap.get_ssl_certificate


From: Ron <ron () skullsecurity net>
Date: Thu, 28 Jan 2010 13:45:44 -0600

On Thu, 28 Jan 2010 12:36:03 -0700
David Fifield <david () bamsoftware com> wrote:

All,

I got a request for ssl-cert.nse to return the length of the
certificate's public key, so the scritp can be used to check for short
keys.

Who wants to add support for this? I think it will be straightforward to
add a new accessor method in nse_ssl_cert.cc. I see the addition of a
new function, ssl_cert_pubkey, that calls the function X509_get_pubkey
and returns a table representing the key information.

David Fifield

Mak, the guy who wrote the Quake3 script, has been working on some SSL/TLS scripts the past week or two. He hasn't 
posted them yet, but I think he'll be able to accomplish what you're asking when he's done. 

-- 
Ron Bowes
http://www.skullsecurity.org
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: