Re: [NSE] SSL Fingerprint Matching

[Fyodor <fyodor () insecure org>]

On Tue, Feb 22, 2011 at 01:24:26PM -0800, David Fifield wrote:
> On Mon, Dec 20, 2010 at 09:37:47PM -0600, Mak Kolybabi wrote:
>
> The output looks like this:
>
>       |_ssl-known-key: 00:28:E7:D4:9C:FA:4A:A5:98:4F:E4:97:EB:73:48:56:07:87:E4:96 is in the database with reason 
> Little Black Box 0.1.
>
> Please change it to be
>
>       |_ssl-known-key: Found in Little Black Box 0.1 - http://code.google.com/p/littleblackbox/ (certificate hash: 
> 00:28:E7:D4:9C:FA:4A:A5:98:4F:E4:97:EB:73:48:56:07:87:E4:96)

And just to further clarify, I think the description in the signature
file corresponding to this should be "Found in Little Black Box 0.1 -
http://code.google.com/p/littleblackbox/";.  That gives us a lot of
flexibility in how known keys are described.

I like the script!

Cheers,
Fyodor
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/