search

konklone / shaaaaaaaaaaaaa

Check if a website has weak SHA-1 TLS certificates.
https://shaaaaaaaaaaaaa.com
BSD 3-Clause "New" or "Revised" License
207 stars 27 forks source link

SNI fails on domains with numbers in #62

Open jonnybarnes opened 10 years ago

jonnybarnes commented 10 years ago

When checking a domain with a number in, the -servername parameter is incorrect so the request made by shaaaa is not valid in terms of SNI. This means the certificate returned isn't necessarily the correct one.

jonnybarnes commented 10 years ago

Hopefully this is fixed by pull request #63