Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HSTS header not reported when it is returned only after a redirect #393

Closed
r0oth3x49 opened this issue Sep 19, 2019 · 1 comment
Closed
Labels

Comments

@r0oth3x49
Copy link

r0oth3x49 commented Sep 19, 2019

Describe the bug
http headers check plugin says HSTS not supported, while scanning the same web on ssllabs shows HSTS enabled. I have also tried with requests to check the headers requests also shows that HSTS is available.

To Reproduce
Steps to reproduce the behavior:

  1. install the latest version of SSLyze from pip.
  2. Run the following command python3 -m sslyze --http_headers emm.epf.gov.my
  3. See the error it says not supported.

Expected behavior
It should also show that HSTS is supported.

Python environment (please complete the following information):

  • OS: Debian Kali latest
  • Python version: 3.7 (default version available on latest kali)

Screen shots for your reference
Locally ran the command using requests and sslyze both.
Capture

ssllabs shows.
Capture

Edit
The reason could be redirections in http request.

@nabla-c0d3 nabla-c0d3 added the bug label Sep 20, 2019
@nabla-c0d3 nabla-c0d3 changed the title HTTP Header plugin Issue. HSTS header not reported when it is returned only after a redirect Oct 9, 2019
@nabla-c0d3
Copy link
Owner

Fix released in v3.0.2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants