Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature request]Does testssl.sh V3.2 support certificate revocation check feature? #2661

Open
securityguy-creator opened this issue Feb 17, 2025 · 1 comment

Comments

@securityguy-creator
Copy link

Which version are you referring to

3.2

Please check this repo whether this is a known feature request

Describe your feature request (if it's a technical feature)

If your feature request otherwise is related to a usage problem, please describe it

I have defined this command: ./testssl.sh --phone-out --htmlfile /home/logs/report2 --debug 6 172.16.60.27:443

But in wireshark it seems testssl.sh hasn't send out CRL request message, but actually testsstl.sh has already get the CDP path from certificate and the Kali which install testssl.sh can access CDP server and get .crl file correctly.

Describe the solution you'd like

@drwetter
Copy link
Collaborator

drwetter commented Feb 17, 2025

Hi @securityguy-creator ,

that is hard to tell without further information. The host is internal and I can't check it myself.

But in wireshark it seems testssl.sh hasn't send out CRL request message, but actually testsstl.sh has already get the CDP path from certificate and the Kali which install testssl.sh can access CDP server and get .crl file correctly.

Not sure I understand this. Are you running testssl.sh from Kali or from the git repo? Did you see a warning (without running --debug 6 )?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants