[7.910][NOTABUG][CLOSED] HTTPS Scanning Exceptions

When testing out HTTPS exceptions, I have noticed that the domains listed in the exceptions list do not appear to be skipped for SSL scanning when selecting that option.

I have the option "For all requests going to this domain" In the list I have tried domain.com, *domain.com, *.domain.com, *.*domain.com and *.*.domain.com for a site that formatted like this https://secure.members.domain.com

I continue to receive SSL errors when visiting the site with these options, and have to disable HTTPS scanning.

0 Astaro Beta Bot over 15 years ago

Astaro Beta Report

--------------------------------

Version: 7.910

Type: NOTABUG

State: CLOSED

Reporter: scmiles

Contributor: RFCat_vk

MantisID: 

Target version: 

Fixed in version: 

--------------------------------

0 kbr over 15 years ago

You are using the wrong kind of pattern for the domain matching. Please try
[FONT="Courier New"].*\.domain\.com[/FONT]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 15 years ago in reply to kbr

Hi kbr,
the format you are suggesting is different to the auto generated format.
The format generated by the ASG is similar to the one posted by scmiles.
I am also trying to workout where the format you suggested would be applied, because that is different to the defaults that are part of the installation package?

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 15 years ago in reply to RFCat_vk_01

the format you are suggesting is different to the auto generated format.

that is correct, the format of the exceptions that we deliver is... well... different. But the whole "which format is used" topic is tracked in as another bug.

the format that we use for the domains in the http exceptions section is called PCRE (Perl Compatible Regular Expressions)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel