github/bettercap
1
0
Fork 0
mirror of https://github.com/bettercap/bettercap synced 2025-08-14 10:46:57 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: using spoofed names for TLS certificate generation in order to be less fingerprintable (fixes #12)

Browse source
This commit is contained in:
evilsocket 2018-01-14 14:12:11 +01:00
commit 2454a669bb
2 changed files with 7 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/api_rest.go
View file

@ -42,12 +42,12 @@ func NewRestAPI(s *session.Session) *RestAPI {
"API authentication username."))
api.AddParam(session.NewStringParameter("api.rest.certificate",
"~/.bettercap-ng.api.rest.certificate.pem",
"~/.bcap-api.rest.certificate.pem",
"",
"API TLS certificate."))
api.AddParam(session.NewStringParameter("api.rest.key",
"~/.bettercap-ng.api.rest.key.pem",
"~/.bcap-api.rest.key.pem",
"",
"API TLS key"))

9
tls/cert.go
View file

@ -30,7 +30,8 @@ func Generate(certPath string, keyPath string) error {
}
notBefore := time.Now()
notAfter := notBefore.Add(time.Duration(24*365) * time.Hour)
aYear := time.Duration(365*24) * time.Hour
notAfter := notBefore.Add(aYear)
serialNumberLimit := new(big.Int).Lsh(big.NewInt(1), 128)
serialNumber, err := rand.Int(rand.Reader, serialNumberLimit)
if err != nil {
@ -40,9 +41,9 @@ func Generate(certPath string, keyPath string) error {
template := x509.Certificate{
SerialNumber: serialNumber,
Subject: pkix.Name{
CommonName: "bettercap-ng",
Organization: []string{"bettercap-ng"},
OrganizationalUnit: []string{"RSA key generation module"},
CommonName: "www.cisco.com",
Organization: []string{"Cisco Systems, Inc."},
OrganizationalUnit: []string{"Cisco Systems, Inc."},
},
NotBefore: notBefore,
NotAfter: notAfter,