Certipy icon indicating copy to clipboard operation
Certipy copied to clipboard

Prefer Hostname in AD CS Web API URL

Open rtpt-erikgeiser opened this issue 2 years ago • 0 comments

When a certificate is requested with -web, the AD CS web API is currently accessed using IP addresses with the hostname in the host header. This can sometimes fail, probably because IIS checks the TLS-SNI instead of the host header depending on the configuration. With this PR, the hostname is used in the url passed to requests such that the TLS-SNI can be set accordingly. As I understand it, self.target.remote_name contains the IP if the hostname cannot be determined, so it should not break anything.

rtpt-erikgeiser avatar Mar 01 '23 14:03 rtpt-erikgeiser