mirror of
https://github.com/zeek/zeek.git
synced 2025-10-06 08:38:20 +00:00
Add DH support to SSL analyzer.
When using DHE or DH-Anon, sever key parameters are now available in scriptland. Also add script to alert on weak certificate keys or weak dh-params.
This commit is contained in:
parent
b1a2bccdc7
commit
fb56b22cff
12 changed files with 288 additions and 7 deletions
8
testing/btest/scripts/base/protocols/ssl/dhe.test
Normal file
8
testing/btest/scripts/base/protocols/ssl/dhe.test
Normal file
|
@ -0,0 +1,8 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/tls/dhe.pcap %INPUT
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
# @TEST-EXEC: btest-diff ssl.log
|
||||
|
||||
event ssl_dh_server_params(c: connection, p: string, q: string, Ys: string)
|
||||
{
|
||||
print "key length in bits", |Ys|*8;
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue