Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-15 13:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

a few more small fixes for chains containing broken certs.

Browse source
This commit is contained in:
Bernhard Amann 2014-05-21 11:01:33 -07:00
parent b16322aefb
commit ff00c0786a
4 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/policy/protocols/ssl/known-certs.bro
View file

@ -48,7 +48,7 @@ event bro_init() &priority=5
event ssl_established(c: connection) &priority=3
{
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| < 1 )
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| < 1 || ! c$ssl$cert_chain[0]?$x509 )
return;
local fuid = c$ssl$cert_chain_fuids[0];

2
scripts/policy/protocols/ssl/validate-certs.bro
View file

@ -28,7 +28,7 @@ export {
event ssl_established(c: connection) &priority=3
{
# If there aren't any certs we can't very well do certificate validation.
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 )
if ( ! c$ssl?$cert_chain || |c$ssl$cert_chain| == 0 || !c$ssl$cert_chain[0]?$x509 )
return;
local chain_id = join_string_vec(c$ssl$cert_chain_fuids, ".");