Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

SCT: add validation of proofs for extensions and OCSP.

Browse source 
This does not yet work for certificates, because this requires some
changing the ASN.1 structure before validation (we need to extract the
tbscert and remove the SCT extension before).

API will change in the future.
This commit is contained in:
Johanna Amann 2017-03-17 11:40:49 -07:00
parent d50bddfbfb
commit c403a7f4e6
6 changed files with 171 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
src/analyzer/protocol/ssl/functions.bif
View file

@ -1,6 +1,7 @@
%%{
#include "analyzer/protocol/ssl/SSL.h"
#include <openssl/x509.h>
%%}
## Sets if the SSL analyzer should consider the connection established (handshake