Nmap Development mailing list archives
Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25
From: kx <kxmail () gmail com>
Date: Fri, 2 Oct 2009 08:35:58 +0200
Does openssl have the feature you need? http://www.h-online.com/security/Testing-email-with-encryption--/features/114281/ I think page 3 and 4 of that article may be close to what you want. Cheers, kx On Fri, Oct 2, 2009 at 1:21 AM, Tom Sellers <nmap () fadedcode net> wrote:
Ok, I have been messing around with trying to pull the SSL cert that is being used for the TLS connection over port 25. After a couple questions from David I have basically decided that I am probably making this much harder than it has to be and wasting time. Basically I am trying to gather information about the SSL certificate that is being used for a SMTP over TLS connection on port 25. The problem is that the session starts out non-SSL. Once the connection is made, and if the server supports it, the client issues the STARTTLS command and then a TLS connection is negotiated. This port is different than 465 where the whole conversation starts out and is encapsulated with SSL/TLS. I have tried connecting to port 25 with a socket, getting to STARTTLS and then trying to use get_ssl_certificate() but I think at that point it expects that the SSL tunnel has already been negotiated. My last effort involved modifying ssl-cert.nse to work on port 25, then if the SSL session errored out on port 25/smtp I would open a fresh socket, toss EHLO at it, vet the response and then send STARTTLS. If that is all good I tried grabbing the cert.. Any thoughts on kicking off the SSL negotiation on a existing socket or any thing else that would help for that matter. Thanks much, Tom _______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://SecLists.Org
_______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://SecLists.Org
Current thread:
- NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Tom Sellers (Oct 01)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 kx (Oct 01)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Tom Sellers (Oct 02)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 SM (Oct 02)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Tom Sellers (Oct 02)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Tom Sellers (Oct 03)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Patrick Donnelly (Oct 04)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Tom Sellers (Oct 04)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Tom Sellers (Oct 04)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Fyodor (Oct 04)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Patrick Donnelly (Oct 06)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 Patrick Donnelly (Oct 04)
- Re: NSE: Need advice on pulling SSL cert used for TLS connection over SMTP port 25 kx (Oct 01)