Hi developers,
I'd like to add a service fingerprint for port 37443/tcp on the Huawei AX3
router.
This port runs SSL/TLS and requires client certificate authentication (mTLS).
When connecting with a self-signed client certificate, the server rejects it
with a "unknown ca" alert, indicating that it verifies the client certificate
against a trusted CA.
**Certificate details:**
Subject: CN=Master.ws7100-10, O=Huawei Technologies Co., Ltd, ST=Hubei, C=CN
Subject Alternative Name: DNS:mediarouter.home, DNS:mediarouter1.home,
DNS:mediarouter2.home, DNS:mediarouter3.home
Issuer: CN=link.home, ST=Hubei, C=CN
**Proposed service fingerprint rule:**
match ssl m|^.*CN=Master\.ws7100-10.*O=Huawei Technologies Co\.\, Ltd.*$|
p/Huawei AX3 management SSL (mTLS required)/
This rule will allow Nmap to identify this service as a Huawei AX3 management
interface, even without being able to complete the application-layer handshake.
Please let me know if you need any further details or packet captures.
Thanks,
Liang Xiangan
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at https://seclists.org/nmap-dev/
