Certificate discovery in HTTPS protocol can be performed efficiently with senhasegura, allowing you to identify and verify certificates used in web applications without the need for login authentication. This process ensures that certificates are validated correctly, contributing to the security of the organization’s digital environment. Below are the detailed instructions for configuring and performing a certificate discovery in HTTPS using senhasegura.
Configuration for Discovery in HTTPS:
- Selecting the Appropriate Settings:
-
Access the senhasegura interface and navigate to the certificate discovery section.
-
Choose to configure a scan without login, since the operation is in HTTPS and the system can directly access the pre-configured certificate in the browser. The images provided detail the options to be selected.
- Connection Configuration:
- In the ‘Connection’ tab, leave the ‘credential’ field blank, indicating that no credentials are required to perform this operation. This specification simplifies the discovery process by removing the need for authentication.
- Certificate Configuration:
- Proceed as per the instructions and settings shown in the images provided for the ‘Certificate’ tab. This tab contains detailed specifications for the scan type and the target object.
- Executing the Discovery Scan:
- With the settings defined, run the discovery scan. A practical example of this operation is the Google Certificate scan, where the senhasegura interface should show the results as indicated in the last image provided.