Re: OpenVPN probes and script question

[Patrik Karlsson <patrik () cqure net>]

On 29 jan 2010, at 21.49, David Fifield wrote:

> On Fri, Jan 29, 2010 at 09:42:39PM +0100, Patrik Karlsson wrote:
> > Apart from the probes I've implemented a script (it's kind of rough
> > for the moment) that retrieves the remote certificate. However, the
> > certificate is ASN encoded. So I guess my question is (before I start
> > re-inventing the wheel (again)), could I call openssl from lua to
> > decode it? I've looked at ssl-cert.nse but it seems to get the cert
> > already decoded in a table. 
>
> See the l_get_ssl_certificate in nse_ssl_cert.cc. That's the bridge
> between Lua and OpenSSL that ssl-cert.nse uses. It's best if you can
> reuse that, though it might take some refactoring to allow getting a
> certificate that's not part of an active OpenSSL session.
>
> David Fifield
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/


Thanks David! I'll have a look immediately.

//Patrik
--
Patrik Karlsson
http://www.cqure.net




_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/