Unable to access ZAP API over HTTPS

[604kev]

The plugin doesn't seem to accept an HTTPS URL for the ZAP API. The "ZAP API URL" field note reads: "The fully qualified domain name (FQDN) with out the protocol. (Eg. zap.example.com)" and attempting to add "https://" as a prefix causes the scan to fail entirely with a network timeout. If the API exposes HTTP as well as HTTPS then it is accessed over tcp/80 only (confirmed in Wireshark).

Is there any way to require HTTPS for the ZAP API URL?

Thanks.

[kasunkv]

@604kev At the moment, you are not able to use a HTTPS URL for the ZAP API. This improvement will be made in an up coming update. I'll keep you updated here.

[604kev]

@kasunkv Thank you for the response, and I'm looking forward to seeing this added.

[mrpolaris]

Any Updates on when this will be an option

[MrBeanzy]

+1 for this

[MrBeanzy]

@kasunkv - Any idea when this will be possible?