Enriches TCP endpoints with TLS certificate information.

windows linux

TLSModule enriches TCP endpoints with TLS certificate information.

Details

It connects to endpoints on well-known TLS ports (HTTPS, IMAPS, LDAPS, etc.) and performs a TLS handshake to extract the leaf certificate. For each certificate it collects: subject, issuer, validity period, serial number, signature and public key algorithms, SHA-1/SHA-256 fingerprints, and DNS names.

The module only uses the Go standard library. Currently it only supports TLS over TCP.

Dependencies