ZAP Errors

Sazid Ali

unread,

Feb 23, 2021, 7:30:12 AM2/23/21

to OWASP ZAP Developer Group

Hello everyone,

I am getting stuck in ZAP for scanning REST API.

I got Connection Refused error.

Please help me.

Sazid Ali

unread,

Feb 23, 2021, 7:33:54 AM2/23/21

to zaproxy...@googlegroups.com

Currently i am facing this error.

--
You received this message because you are subscribed to the Google Groups "OWASP ZAP Developer Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-devel...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/59a0afda-871b-4367-9930-f966ce78d46cn%40googlegroups.com.

--

Thanks and Regards

Sazid Ali

2x Salesforce || 2x COPADO Certified at Algoworks

psiinon

unread,

Feb 23, 2021, 7:35:04 AM2/23/21

to OWASP ZAP Developer Group

What are you doing when you get that error?

Can you connect to the URL that you are trying from the command line, eg using curl?

Sazid Ali

unread,

Feb 23, 2021, 7:42:20 AM2/23/21

to zaproxy...@googlegroups.com

I am trying to scan API's.
So that I can generate ZAP report for an Appexchange Security review.

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/6dcddeca-4a8c-4ff7-ba23-b33871943e50n%40googlegroups.com.

psiinon

unread,

Feb 23, 2021, 7:48:19 AM2/23/21

to OWASP ZAP Developer Group

Can you connect to the URL that you are trying from the command line, eg using curl?

Sazid Ali

unread,

Feb 23, 2021, 8:07:24 AM2/23/21

to zaproxy...@googlegroups.com

After using curl, Now i am getting again HandShak_Failure.

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/5543ea2f-38bb-4955-b16a-6baf67a7e695n%40googlegroups.com.

Sazid Ali

unread,

Feb 23, 2021, 8:11:26 AM2/23/21

to zaproxy...@googlegroups.com

After using curl, Now i am getting again HandShak_Failure.

On Tue, Feb 23, 2021 at 6:18 PM psiinon <psi...@gmail.com> wrote:

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/5543ea2f-38bb-4955-b16a-6baf67a7e695n%40googlegroups.com.

psiinon

unread,

Feb 23, 2021, 9:13:46 AM2/23/21

to OWASP ZAP Developer Group

If curl is failing then you have a problem with your site.

Sazid Ali

unread,

Feb 23, 2021, 9:39:52 AM2/23/21

to zaproxy...@googlegroups.com

I have a 3rd party API along with certificate, Passphrase and Username, password.

I am trying with Basic Auth.

Then got Handshake Failure error.

Please help me.

Thanks in advance.

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/49e9407d-a045-4fed-845d-8db242b609d0n%40googlegroups.com.

psiinon

unread,

Feb 23, 2021, 9:41:32 AM2/23/21

to OWASP ZAP Developer Group

Have a look at this FAQ: https://www.zaproxy.org/faq/how-to-connect-to-an-https-site-that-reports-a-handshake-failure/

Sazid Ali

unread,

Feb 23, 2021, 9:53:29 AM2/23/21

to zaproxy...@googlegroups.com

I have done all workarround it : https://www.zaproxy.org/faq/how-to-connect-to-an-https-site-that-reports-a-handshake-failure/

But still stuck in this error. (HandShake_Failure)

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/b358d4a8-7138-4073-b38d-13336ded8f97n%40googlegroups.com.

kingthorin+owaspzap

unread,

Feb 23, 2021, 2:20:10 PM2/23/21

to OWASP ZAP Developer Group

You have a client certificate? Did you set it up in the Client Certificate options?

https://www.zaproxy.org/docs/desktop/ui/dialogs/options/certificate/

Sazid Ali

unread,

Feb 24, 2021, 1:47:04 AM2/24/21

to zaproxy...@googlegroups.com

Yes, I have a client certificate.

After I set it under options then it will generate Gateway timeout error.

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/bfe48d66-d04a-4229-9fbf-401c0f17e2e9n%40googlegroups.com.

Reply all

Reply to author

Forward