Skip to content

Commit 226853f

Browse files
Fix EKU lookup in certificate
1 parent 7e42746 commit 226853f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/msf/core/exploit/remote/pkcs12/storage.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ def filter_pkcs12(options)
7575

7676
if options[:tls_auth]
7777
eku = cert.extensions.select { |c| c.oid == 'extendedKeyUsage' }.first
78-
unless eku&.value == 'TLS Web Client Authentication'
78+
unless eku&.value.include?('TLS Web Client Authentication')
7979
ilog("[filter_pkcs12] Found a matching certificate but it doesn't have the 'TLS Web Client Authentication' EKU")
8080
next false
8181
end

0 commit comments

Comments
 (0)