Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 08:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

last ssl fixes - missed three more.

Browse source 
This is the last one, I promise.
This commit is contained in:
Bernhard Amann 2014-05-21 11:24:47 -07:00
parent 9a8fc7a47d
commit cb2eb0228b
3 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
scripts/policy/protocols/ssl/expiring-certs.bro
View file

@ -38,7 +38,8 @@ event ssl_established(c: connection) &priority=3
{ {
# If there are no certificates or we are not interested in the server, just return. # If there are no certificates or we are not interested in the server, just return.
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 || if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 ||
! addr_matches_host(c$id$resp_h, notify_certs_expiration) ) ! addr_matches_host(c$id$resp_h, notify_certs_expiration) ||
! c$ssl$cert_chain[0]?$x509 )
return; return;
local fuid = c$ssl$cert_chain_fuids[0]; local fuid = c$ssl$cert_chain_fuids[0];

2
scripts/policy/protocols/ssl/notary.bro
View file

@ -39,7 +39,7 @@ function clear_waitlist(digest: string)
event ssl_established(c: connection) &priority=3 event ssl_established(c: connection) &priority=3
{ {
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 ) if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 || ! c$ssl$cert_chain[0]?$sha1 )
return; return;
local digest = c$ssl$cert_chain[0]$sha1; local digest = c$ssl$cert_chain[0]$sha1;

3
scripts/policy/protocols/ssl/weak-keys.bro
View file

@ -37,7 +37,8 @@ event ssl_established(c: connection) &priority=3
{ {
# If there are no certificates or we are not interested in the server, just return. # If there are no certificates or we are not interested in the server, just return.
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 || if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 ||
! addr_matches_host(c$id$resp_h, notify_weak_keys) ) ! addr_matches_host(c$id$resp_h, notify_weak_keys) ||
! c$ssl$cert_chain[0]?$x509 )
return; return;
local fuid = c$ssl$cert_chain_fuids[0]; local fuid = c$ssl$cert_chain_fuids[0];