https-redirect bug causing scans to take much longer

[Daniel Cater]

Hello,

On a recent build from Github-master, I noticed a lot of slow scans which
were waiting for various default SSL scripts such as ssl-cert etc. to
timeout.

After some debugging, I think the root cause is the https-redirect script
misidentifying plain HTTP services as ssl/http which then causes a load of
extra scripts to be run.

More details here: https://github.com/nmap/nmap/issues/1400

I'm not sure if the error is in the script or in comm.tryssl function.

Hopefully the information I put there can help with the fix.

Thanks.

[nnposter]

Post by Daniel Cater
On a recent build from Github-master, I noticed a lot of slow scans
which were waiting for various default SSL scripts such as ssl-cert etc.
to timeout.
After some debugging, I think the root cause is the https-redirect
script misidentifying plain HTTP services as ssl/http which then causes
a load of extra scripts to be run.
More details here: https://github.com/nmap/nmap/issues/1400
I'm not sure if the error is in the script or in comm.tryssl function.
Hopefully the information I put there can help with the fix.

Hopefully fixed in r37530

Cheers,
nnposter

[Daniel Cater]

Yes, the problem seems to be fixed now, thanks for the quick response!

Post by nnposter

Post by Daniel Cater
On a recent build from Github-master, I noticed a lot of slow scans
which were waiting for various default SSL scripts such as ssl-cert etc.
to timeout.
After some debugging, I think the root cause is the https-redirect
script misidentifying plain HTTP services as ssl/http which then causes
a load of extra scripts to be run.
More details here: https://github.com/nmap/nmap/issues/1400
I'm not sure if the error is in the script or in comm.tryssl function.
Hopefully the information I put there can help with the fix.

Hopefully fixed in r37530
Cheers,
nnposter
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/