Disable SSL Certificate Verification

[spacemishka]

• I'm reporting a feature request
• I've checked for similar feature requests including closed ones

Could you implement a switch to disable the verification of SSL Certificates? It could be useful behind some proxies. Currently i am facing this issue

(Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)'))) Using the proxy:

thanks!

[Sebhadde]

Hh

[spacemishka]

Hh

sorry?

[0xdavidel]

Hi spacemishka

What website gave you the error?
Are you able to recreate this error reliably?

[spacemishka]

I get this with any website and i is always happen when running behind a proxy. NO issues when using Python requests with ssl verification disabled.

[0xdavidel]

I think that the best course of action is to add an argument that disables SSL checks in requests
that argument should be accessible from where the request is being sent

and pass the boolean into an argument called verify. when verify = False requests wont check SSL integrity

I will work on that if I get a chance, but feel free to take over this.

[0xStryK3R]

Hi @DavidEl03 , I would like to take this up if this issue is still pending. Do assign it to me if it is open for contribution.

[0xdavidel]

@0xStryK3R feel free to implement the changes, I think it's still up for grabs. Just double check if it's still an issue by using the tool with VPN or proxy

[Dragonblue96]

• I'm reporting a feature request

  • I've checked for similar feature requests including closed ones

Could you implement a switch to disable the verification of SSL Certificates? It could be useful behind some proxies. Currently i am facing this issue

(Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)'))) Using the proxy:

thanks!

how did you fix this issue?
Please help me I'm facing the similar issue

[sdushantha]

This is an issue with your environment and not Sherlock itself. I've encountered similar issues with cURL before and was able to fix it systemwide. Unsure what I did but did find it on Stackoverflow somewhere

[0xdavidel]

This is an issue with your environment and not Sherlock itself. I've encountered similar issues with cURL before and was able to fix it systemwide. Unsure what I did but did find it on Stackoverflow somewhere

Hey bud, this is definitely a needed feature and a real issue, changing system wide configuration just for a single tool is not a viable solution. It's just an opening for trouble down the road for those users.

[sdushantha]

Yeah thats a good point, didn't think about that. I've opened this issue and if @0xStryK3R still wants to work on this, I'll take a look at the PR 👍

[ll299]

Hi, our team is working on this.