https-redirect bug causing scans to take much longer

Daniel Cater <[email protected]> Tue, 27 Nov 2018 17:42:25 +0000
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAC_doekr8VWLBwTtOY+4Ugf3_Yq0hqx+30cqfsWs2Cj7SvA6WQ@mail.gmail.com>
Hello,

On a recent build from Github-master, I noticed a lot of slow scans which
were waiting for various default SSL scripts such as ssl-cert etc. to
timeout.

After some debugging, I think the root cause is the https-redirect script
misidentifying plain HTTP services as ssl/http which then causes a load of
extra scripts to be run.

More details here: https://github.com/nmap/nmap/issues/1400

I'm not sure if the error is in the script or in comm.tryssl function.

Hopefully the information I put there can help with the fix.

Thanks.

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/