Merge remote-tracking branch 'origin/topic/johanna/spicysslnews'

* origin/topic/johanna/spicysslnews:
  Add blurb about Spicy SSL to NEWS
This commit is contained in:
Tim Wojtulewicz 2024-12-11 12:59:17 -07:00
commit 9e19b51f41
3 changed files with 15 additions and 1 deletions

View file

@ -1,3 +1,7 @@
7.1.0-dev.779 | 2024-12-11 12:59:17 -0700
* Add blurb about Spicy SSL to NEWS (Johanna Amann, Corelight)
7.1.0-dev.777 | 2024-12-11 12:38:48 -0700 7.1.0-dev.777 | 2024-12-11 12:38:48 -0700
* Add Spicy analyzers to Coverity builds (Tim Wojtulewicz, Corelight) * Add Spicy analyzers to Coverity builds (Tim Wojtulewicz, Corelight)

10
NEWS
View file

@ -172,6 +172,16 @@ New Functionality
when doing so as Zeek nodes will not listen on Broker ports anymore, nor will when doing so as Zeek nodes will not listen on Broker ports anymore, nor will
they establish a peering to other nodes. they establish a peering to other nodes.
- Zeek now ships with an experimental Spicy-based SSL analyzer, which is
disabled by default. This analyzer can be enabled using the
``--enable-spicy-ssl`` conifgure-time option. The Spicy-based analyzer has
full support for SSL and TLS, just like the current binpac analyzer. It does,
however, not support any version of DTLS. Enabling it will disable DTLS
parsing in Zeek.
The analyzer is currently mostly interesting if you want to experiment with
SSL; we do not yet recommend to enable it in normal Zeek deployments.
Changed Functionality Changed Functionality
--------------------- ---------------------

View file

@ -1 +1 @@
7.1.0-dev.777 7.1.0-dev.779