cancel
Showing results for 
Search instead for 
Did you mean: 
feickholt
Level 10

Tipp: Getting more detailed SSL information on a block page....

Hi,

if you use SSL intercept you might find SSL Sites which are blocked by some Certificate Verification rules.... (like LetsEncryt Certs, if you did not trust such cert manually)

The normal SSl Properties do not allow to get informations about Cert tree or issuer....

We use the following solution to get a more detailed block page.

First we must remove the Access-Control-Allow-Origin Header for www.digicert.com

Then you are able to add such informations from external to your blockpage:

Here is the Code for the Blockpage you have to add:

FRANK

2 Replies
lubomir.cerny
Level 12

Re: Tipp: Getting more detailed SSL information on a block page....

It is great idea.

Can you post JS code as text instead of picture ?

Thx.

0 Kudos
feickholt
Level 10

Re: Tipp: Getting more detailed SSL information on a block page....

sure:

<script language="JavaScript">

function httpGet(theUrl,params)

{

   var data = new FormData();

   data.append('host', params);

    var xmlHttp = new XMLHttpRequest();

    xmlHttp.open( "POST", theUrl, false ); // false for synchronous request

    xmlHttp.send( data );

    return xmlHttp.responseText;

}

document.write ("<br><hr><font size=-1>  <base href=http://www.digicert.com>");

var s = httpGet ("https://www.digicert.com/api/check-host.php","$<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.system.url.host"/>$");

document.write (s);

</script>