Skip to content

HTTPS with self-signed certificates is silently broken #2

@Kernel-Error

Description

@Kernel-Error

Problem

--scheme https exists as a CLI flag but is effectively useless. requests.Session() defaults to verify=True, and virtually every IP camera that speaks HTTPS uses a self-signed certificate. Every request throws an SSLError, which gets swallowed as a head_error: — no meaningful results are produced.

Expected behavior

The tool should support scanning cameras over HTTPS, since many modern cameras default to or only offer HTTPS with self-signed certs.

Suggested fix

Add a --no-verify-ssl flag that sets session.verify = False and suppresses the InsecureRequestWarning. The flag should default to off (safe default), but be prominently documented for the common self-signed cert scenario.

Files affected

  • cam_probe.py: session creation (~line 1100), build_cli() (~line 1009)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions