[Errno 104] Connection reset by peer

[init5-SF]

[Errno 104] Connection reset by peer

[ly4k]

The reason it fails is because the DC has not been issued a certificate for server authentication. Certipy will try LDAPS by default which requires the server to have a certificate for server authentication. If it doesn't, the server closes the connection. If you want to proceed without adding a certificate on the DC, then switch to plaintext LDAP with -scheme ldap.

[altjx]

@init5-SF thanks for reporting your results. Based on that, it sounds like this response should say something more like "No certificate installed on the target." ?

[init5-SF]

hi @altjx
Yes that's pretty much it, some sort of error handling 👍🏼

[init5-SF]

UPDATE

I created a selfsigned cert and installed it on the DC and now Certipy works without errors.
Certipy just needs a little bit of error handling, other than that all is fine.