knot icon indicating copy to clipboard operation
knot copied to clipboard

tls: DEBUG: print Subject Alternative Name

Open Red54 opened this issue 5 months ago • 2 comments

Before:

$ kdig +short +tls dns.google @223.5.5.5 -d
;; DEBUG: Querying for owner(dns.google.), class(1), type(1), server(223.5.5.5), port(853), protocol(TCP)
;; DEBUG: TLS, received certificate hierarchy:
;; DEBUG:  #1, C=CN,ST=浙江省,L=杭州市,O=阿里巴巴(中国)网络技术有限公司,CN=*.alidns.com
;; DEBUG:      SHA-256 PIN: pa14rFR/bBJ25OSjCswaXu6YKWgQ2BDY5jhRRicqeik=
;; DEBUG:  #2, C=BE,O=GlobalSign nv-sa,CN=GlobalSign ECC OV SSL CA 2018
;; DEBUG:      SHA-256 PIN: KJpedoXG+Rd6IJnYeOJjxUjlaDEDI8K1vCBBgzeJkC4=
;; DEBUG: TLS, skipping certificate PIN check
;; DEBUG: TLS, skipping certificate verification
8.8.4.4
8.8.8.8

After:

$ kdig +short +tls dns.google @223.5.5.5 -d
;; DEBUG: Querying for owner(dns.google.), class(1), type(1), server(223.5.5.5), port(853), protocol(TCP)
;; DEBUG: TLS, received certificate hierarchy:
;; DEBUG:  #1, C=CN,ST=浙江省,L=杭州市,O=阿里巴巴(中国)网络技术有限公司,CN=*.alidns.com
;; DEBUG:      Subject Alternative Name (not critical):
			DNSname: *.alidns.com
			IPAddress: 223.5.5.5
			IPAddress: 223.6.6.6
			IPAddress: 120.55.203.44
			IPAddress: 47.103.166.57
			IPAddress: 47.108.0.63
			IPAddress: 39.103.26.204
			IPAddress: 139.129.137.137
			IPAddress: 47.122.8.11
			IPAddress: 123.184.198.22
			IPAddress: 113.142.83.132
			IPAddress: 113.240.88.172
			IPAddress: 123.151.107.5
			IPAddress: 182.40.70.12
			IPAddress: 8.129.152.230
			IPAddress: 1.71.20.37
			DNSname: alidns.com
;; DEBUG:      SHA-256 PIN: pa14rFR/bBJ25OSjCswaXu6YKWgQ2BDY5jhRRicqeik=
;; DEBUG:  #2, C=BE,O=GlobalSign nv-sa,CN=GlobalSign ECC OV SSL CA 2018
;; DEBUG:      SHA-256 PIN: KJpedoXG+Rd6IJnYeOJjxUjlaDEDI8K1vCBBgzeJkC4=
;; DEBUG: TLS, skipping certificate PIN check
;; DEBUG: TLS, skipping certificate verification
8.8.4.4
8.8.8.8

Red54 avatar Sep 13 '24 13:09 Red54