Re:Correction: Huawei router misidentified as Netgear switch (fingerprint included)

["gbfdhenr (Liang Xiangan)" <gbfdhenr () 163 com>]

Hi developers,


I'd like to add a service fingerprint for port 37443/tcp on the Huawei AX3 router.


This port runs SSL/TLS and requires client certificate authentication (mTLS). When connecting with a self-signed client 
certificate, the server rejects it with a "unknown ca" alert, indicating that it verifies the client certificate 
against a trusted CA.


**Certificate details:**


Subject: CN=Master.ws7100-10, O=Huawei Technologies Co., Ltd, ST=Hubei, C=CN
Subject Alternative Name: DNS:mediarouter.home, DNS:mediarouter1.home, DNS:mediarouter2.home, DNS:mediarouter3.home
Issuer: CN=link.home, ST=Hubei, C=CN


**Proposed service fingerprint rule:**


match ssl m|^.*CN=Master\.ws7100-10.*O=Huawei Technologies Co\.\, Ltd.*$| p/Huawei AX3 management SSL (mTLS required)/


This rule will allow Nmap to identify this service as a Huawei AX3 management interface, even without being able to 
complete the application-layer handshake.


Please let me know if you need any further details or packet captures.


Thanks,
Liang Xiangan

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at https://seclists.org/nmap-dev/