OJ / gobuster

Directory/File, DNS and VHost busting tool written in Go
Apache License 2.0
9.65k stars 1.18k forks source link

Fix "local error: tls: no renegotiation" for self-signed certs #506

Closed fkasler closed 4 months ago

fkasler commented 4 months ago

Some servers with self-signed certs response cause a "local error: tls: no renegotiation" error. To fix, I added "Renegotiation: tls.RenegotiateOnceAsClient" to the TLS config per this solution:

https://stackoverflow.com/questions/57420833/tls-no-renegotiation-error-on-http-request

Seems to fix the problem.

firefart commented 4 months ago

Thanks I made this optional using a cli option so it's still disabled by default. You can try it on the dev branch if you like