AnsweredAssumed Answered

No grading on failed HPKP check

Question asked by ronald van den berg on Sep 18, 2019
Latest reply on Sep 19, 2019 by ronald van den berg

I'm using the ssllabs api to monitor the gradings of our certificates via powershell, see below.

But on sites that have a failed HPKP check i don't get a grading object back in the json, while if i check the same site via the webbased server test i do get a grading.

I cannot find a way to skip the hpkp check....is there any way to fix this?

 

$url="https://myurl.com"
$api = "https://api.dev.ssllabs.com/api/v3/analyze?host=$url&all=on&publish=off&fromCache=on"
$json = Invoke-WebRequest -Uri $api -ErrorAction SilentlyContinue | ConvertFrom-Json
$endpoints = $json | select -ExpandProperty endpoints
$Grade = $endpoints.grade | select -First 1
write-host "Grade: $Grade"

Outcomes