https://github.com/atpons/slack-mtls-inspector

PoC of Slack API over mTLS
https://github.com/atpons/slack-mtls-inspector

Last synced: about 1 month ago
JSON representation

PoC of Slack API over mTLS

• Host: GitHub
• URL: https://github.com/atpons/slack-mtls-inspector
• Owner: atpons
• Created: 2020-05-31T05:42:03.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2020-06-01T14:34:04.000Z (over 4 years ago)
• Last Synced: 2024-11-30T20:06:50.312Z (about 1 month ago)
• Language: Go
• Homepage:
• Size: 317 KB
• Stars: 1
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
Slack mTLS PoC

---

https://api.slack.com/authentication/verifying-requests-from-slack#mutual_tls

Read `tls.ConnectionState` and the peer (Slack) indicates a certificate (chained with DigiCert Root CA).

```console

$ CRT_FILE=/etc/letsencrypt/live/atpons.example.com/cert.pem KEY_FILE=/etc/letsencrypt/live/atpons.example.com/privkey.pem HOST=atpons.example.com ./inspector

2020/05/31 08:10:45 HOST=atpons.example.com

2020/05/31 08:10:55 request: found tls peer cert n=0 commonName=platform-tls-client.slack.com

2020/05/31 08:10:55 request: found tls peer cert by Slack

2020/05/31 08:10:55 request: found tls peer cert n=1 commonName=DigiCert SHA2 Secure Server CA

2020/05/31 08:10:55 request: SlackSignature=v0=

```