Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix the caching of recently validated certs

Browse source 
The recently_validated_certs table was being checked for entries, but
missing hashes were not being added to it after validation.
This commit is contained in:
Justin Azoff 2013-12-10 11:27:19 -05:00
parent e8739f785b
commit cbe48258f6
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
scripts/policy/protocols/ssl/validate-certs.bro
View file

@ -40,6 +40,7 @@ event ssl_established(c: connection) &priority=3
{ {
local result = x509_verify(c$ssl$cert, c$ssl$cert_chain, root_certs); local result = x509_verify(c$ssl$cert, c$ssl$cert_chain, root_certs);
c$ssl$validation_status = x509_err2str(result); c$ssl$validation_status = x509_err2str(result);
recently_validated_certs[c$ssl$cert_hash] = c$ssl$validation_status;
} }
if ( c$ssl$validation_status != "ok" ) if ( c$ssl$validation_status != "ok" )