Make OCSP analyzer part of the X.509 analyzer

This allows the easier integration of shared functionality. And it also makes logical sense, given that OCSP is not interesting without X.509.
2025-10-08 17:48:21 +00:00 · 2017-02-08 10:57:30 -08:00 · 2017-02-08 10:57:30 -08:00 · c670613996
commit c670613996
parent dfc871f831
16 changed files with 13 additions and 47 deletions
--- a/scripts/base/files/ocsp/README
+++ b/scripts/base/files/ocsp/README
@ -1 +0,0 @@
-Support for ocsp file analysis framework.
--- a/scripts/base/files/ocsp/load.bro
+++ b/scripts/base/files/ocsp/load.bro
@ -1 +0,0 @@
-@load ./main
--- a/scripts/base/files/x509/README
+++ b/scripts/base/files/x509/README
@ -1 +1,2 @@
 Support for X509 certificates with the file analysis framework.
+Also supposrts OCSP requests and responses.
--- a/scripts/base/files/x509/ocsp.bro
+++ b/scripts/base/files/x509/ocsp.bro
@ -2,6 +2,8 @@
@load base/utils/paths
@load base/utils/queue

+# Note - this needs some cleaning up and is currently not loaded by default.
+
 module OCSP;

 export {
--- a/scripts/base/init-default.bro
+++ b/scripts/base/init-default.bro
@ -77,7 +77,6 @@
@load base/files/extract
@load base/files/unified2
@load base/files/x509
-@load base/files/ocsp

@load base/misc/find-checksum-offloading
@load base/misc/find-filtered-trace