From 30d1b974007bee2b627149aac4919420445a8c0d Mon Sep 17 00:00:00 2001 From: Robin Sommer Date: Wed, 9 Oct 2013 13:22:25 -0700 Subject: [PATCH] Removing ICSI notary from default site config. This should not have been in there in the first place. --- scripts/site/local.bro | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/site/local.bro b/scripts/site/local.bro index 5b4af4d87e..2f4eed9865 100644 --- a/scripts/site/local.bro +++ b/scripts/site/local.bro @@ -59,9 +59,9 @@ # This script enables SSL/TLS certificate validation. @load protocols/ssl/validate-certs -# This script checks each SSL certificate hash against the ICSI certificate -# notary service. -@load protocols/ssl/notary +# Uncomment the following line to check each SSL certificate hash against the ICSI +# certificate notary service; see http://notary.icsi.berkeley.edu . +# @load protocols/ssl/notary # If you have libGeoIP support built in, do some geographic detections and # logging for SSH traffic.