Re: Unable to get SSL Certificate info for SNMP seriver with nmap ssl-cert

[Daniel Miller <bonsaiviking () gmail com>]

Venky,

Can you confirm that the SNMP service is actually running SSL? This would
be a highly unusual configuration, but you could test with an independent
tool. What is the output of this command?

openssl s_client -connect <host>:<snmpport>

Instead of SSL do you perhaps have SNMPv3 with encryption enabled?

Dan

On Fri, Sep 18, 2015 at 8:25 AM, knare k <knarelinux () gmail com> wrote:

> Hi Ulrik,
>
> Thanks for your response. We tried with the '+' option, but no luck.
> We have set up  snmp server locally on our ubuntu machine and tried
> it. Checking if we configured the snmp server properly, I will let you
> know if it works.
>
> Thanks
> Venky.
>
>
> ---------- Forwarded message ----------
> From: Ulrik Haugen <qha () lysator liu se>
> Date: Mon, Sep 14, 2015 at 9:56 PM
> Subject: Re: Unable to get SSL Certificate info for SNMP seriver with
> nmap ssl-cert
> To: knare k <knarelinux () gmail com>
>
>
> knare k <knarelinux () gmail com> wrote:
> > I am not able to get SSL certificate for snmp using ssl-cert script of
> > nmap, able to get for all others. I tried the following command with
> > the snmp port.
> >
> > # nmap  -sU -Pn -p <snmpport> <host> --script=ssl-cert
>
> You might have more luck with:
>
> # nmap -sU -Pn -p <snmpport> --script=+ssl-cert <host>
>
> The "+" before the script name makes it run even though the portrule
> doesn't fire. Unfortunately i can't find the documentation for it right
> now so i can't show how you should have discovered it.
>
> Please report if this works, i have some scripts that need tuning if it
> does!
>
> Best regards
> /Ulrik Haugen
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/