Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

update SSL consts from TLS 1.3

Browse source
This commit is contained in:
Johanna Amann 2019-04-22 22:43:09 +02:00
parent d5803d7047
commit 5ba46eaa71
5 changed files with 23 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

4
CHANGES
View file

@ -1,4 +1,8 @@
2.6-242 | 2019-04-22 22:43:09 +0200
* update SSL consts from TLS 1.3 (Johanna Amann)
2.6-241 | 2019-04-22 12:38:06 -0700 2.6-241 | 2019-04-22 12:38:06 -0700
* Add 'g' character to conn.log history field to flag content gaps (Vern Paxson, Corelight) * Add 'g' character to conn.log history field to flag content gaps (Vern Paxson, Corelight)

2
VERSION
View file

@ -1 +1 @@
2.6-241 2.6-242

2
doc

@ -1 +1 @@
Subproject commit 8e741019c26015066b1e59c224de3ae6b20ff76f Subproject commit 38f6edaf273401eef51cf754010f144be6398066

11
scripts/base/protocols/ssl/consts.zeek
View file

@ -78,6 +78,7 @@ export {
[4] = "sha256", [4] = "sha256",
[5] = "sha384", [5] = "sha384",
[6] = "sha512", [6] = "sha512",
[8] = "Intrinsic",
} &default=function(i: count):string { return fmt("unknown-%d", i); }; } &default=function(i: count):string { return fmt("unknown-%d", i); };
## Mapping between numeric codes and human readable strings for signature ## Mapping between numeric codes and human readable strings for signature
@ -87,6 +88,16 @@ export {
[1] = "rsa", [1] = "rsa",
[2] = "dsa", [2] = "dsa",
[3] = "ecdsa", [3] = "ecdsa",
[4] = "rsa_pss_sha256",
[5] = "rsa_pss_sha384",
[6] = "rsa_pss_sha512",
[7] = "ed25519",
[8] = "ed448",
[9] = "rsa_pss_sha256",
[10] = "rsa_pss_sha384",
[11] = "rsa_pss_sha512",
[64] = "gostr34102012_256",
[65] = "gostr34102012_256",
} &default=function(i: count):string { return fmt("unknown-%d", i); }; } &default=function(i: count):string { return fmt("unknown-%d", i); };
## Mapping between numeric codes and human readable strings for alert ## Mapping between numeric codes and human readable strings for alert

12
testing/btest/Baseline/scripts.base.protocols.ssl.tls-extension-events/.stdout
View file

@ -33,9 +33,9 @@ signature_algorithm, 192.168.6.240, 139.162.123.134
sha256, ecdsa sha256, ecdsa
sha384, ecdsa sha384, ecdsa
sha512, ecdsa sha512, ecdsa
unknown-8, unknown-4 Intrinsic, rsa_pss_sha256
unknown-8, unknown-5 Intrinsic, rsa_pss_sha384
unknown-8, unknown-6 Intrinsic, rsa_pss_sha512
sha256, rsa sha256, rsa
sha384, rsa sha384, rsa
sha512, rsa sha512, rsa
@ -66,9 +66,9 @@ signature_algorithm, 192.168.6.240, 139.162.123.134
sha256, ecdsa sha256, ecdsa
sha384, ecdsa sha384, ecdsa
sha512, ecdsa sha512, ecdsa
unknown-8, unknown-4 Intrinsic, rsa_pss_sha256
unknown-8, unknown-5 Intrinsic, rsa_pss_sha384
unknown-8, unknown-6 Intrinsic, rsa_pss_sha512
sha256, rsa sha256, rsa
sha384, rsa sha384, rsa
sha512, rsa sha512, rsa