SSL Expired port 1515

[doc dodo]

Hello,

A vulnerability scanner has identified a vulnerability on port 1515 - SSL Expired.

How can I check the validity of a SSL certificate on the port 1515?

[Pablo Moliz Arias]

Hi, to verify the validity of the SSL certificate on port 1515, you should use command-line tools like Nmap.
Here is the Nmap command you need to verify that certificate.
Since you are dealing with a vulnerability report, you just need to confirm if the scanner is correct about the expiration date.
Run this from your terminal:

nmap -p 1515 --script ssl-cert <TARGET_IP>

(Just replace <TARGET_IP> with your server's address).


What to look for: Nmap will output a block of text. You need to find the Not valid after line:

PORT STATE SERVICE
1515/tcp open ifor-protocol
| ssl-cert: Subject: commonName=example.com
| Not valid before: 2020-01-01T00:00:00
|_Not valid after: 2023-01-01T23:59:59 <-- CHECK THIS DATE

If that date is in the past, the vulnerability is confirmed.