Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 16:48:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Fix circular reference problem and a few other small things.

Browse source 
SSL::Info now holds a reference to Files::Info instead of the
fa_files record.

Everything should work now, if everyone thinks that the interface is
ok I will update the test baselines in a bit.

addresses BIT-953, BIT-760
This commit is contained in:
Bernhard Amann 2014-03-04 05:29:04 -08:00
parent 110d9fbd6a
commit 7eb6b5133e
8 changed files with 24 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/policy/protocols/ssl/expiring-certs.bro
View file

@ -39,7 +39,7 @@ event ssl_established(c: connection) &priority=3
! addr_matches_host(c$id$resp_h, notify_certs_expiration) )
return;
local hash = c$ssl$cert_chain[0]$info$md5;
local hash = c$ssl$cert_chain[0]$md5;
local cert = c$ssl$cert_chain[0]$x509$certificate;
if ( cert$not_valid_before > network_time() )

2
scripts/policy/protocols/ssl/extract-certs-pem.bro
View file

@ -34,7 +34,7 @@ event ssl_established(c: connection) &priority=5
if ( ! addr_matches_host(c$id$resp_h, extract_certs_pem) )
return;
local hash = c$ssl$cert_chain[0]$info$sha1;
local hash = c$ssl$cert_chain[0]$sha1;
local cert = c$ssl$cert_chain[0]$x509$handle;
if ( hash in extracted_certs )

2
scripts/policy/protocols/ssl/known-certs.bro
View file

@ -51,7 +51,7 @@ event ssl_established(c: connection) &priority=3
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| < 1 )
return;
local hash = c$ssl$cert_chain[0]$info$sha1;
local hash = c$ssl$cert_chain[0]$sha1;
local cert = c$ssl$cert_chain[0]$x509$certificate;
local host = c$id$resp_h;

2
scripts/policy/protocols/ssl/notary.bro
View file

@ -42,7 +42,7 @@ event ssl_established(c: connection) &priority=3
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 )
return;
local digest = c$ssl$cert_chain[0]$info$sha1;
local digest = c$ssl$cert_chain[0]$sha1;
if ( digest in notary_cache )
{