Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve: ssl cert info #121

Open
coindroid42 opened this issue Dec 29, 2020 · 3 comments
Open

Improve: ssl cert info #121

coindroid42 opened this issue Dec 29, 2020 · 3 comments
Labels
feature request New feature or request

Comments

@coindroid42
Copy link

When I allow or deny some requests, I often see the domain. I would like to know what this domain is and who issued the certificate. It would be nice to show information about the certificate. Maybe somehow further expand the information about domains. To avoid an attack through a purchased domain similar to super-arch-linux.com

@coindroid42 coindroid42 reopened this Dec 29, 2020
@gustavo-iniguez-goya gustavo-iniguez-goya added the feature request New feature or request label Dec 29, 2020
@gustavo-iniguez-goya
Copy link
Owner

There's some work already done here https://github.com/evilsocket/opensnitch/tree/passive-tls-query

I improved it a little bit, but I haven't published my changes.

@gustavo-iniguez-goya
Copy link
Owner

@themighty1
Copy link

Maybe for starters we could show in the UI one line of the output of:

openssl s_client -brief example.com:443

Peer certificate: C = US, ST = California, L = Los Angeles, O = Internet Corporation for Assigned Names and Numbers, CN = www.example.org

Would that be sufficient for your needs @coindroid42 or do you want more info?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature request New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants