* origin/topic/yunzheng/x509-generalizedtime:
Make x509 end-of-string-check nicer.
Refactor X509 generalizedtime support and test.
Fixed parsing of V_ASN1_GENERALIZEDTIME timestamps in x509 certificates
BIT-1481 #merged
* origin/topic/dnthayer/ticket1481:
Improve a few test canonifiers
Remove unnecessary use of TEST_DIFF_CANONIFIER
Fixed some test canonifiers to read only from stdin
BIT-1484 #merged
* origin/topic/dnthayer/doc-fixes:
Fix documentation of encode/decode_base64 BiFs
Update some doc tests and baselines
Update and improve install instructions
More improvements to input framework documentation
Update install instructions for CAF
Improve documentation of input framework
Fixed some examples in "Writing Bro Scripts" doc
Clarifications to the script reference docs
Split long lines in input framework docs
Update documentation of Conn::Info history field
Minor clarifications and typo fixes in broker doc
Remove unnecessary blank lines from some broker doc files
Fix some doc build warnings
Improve documentation of table and set types
Fix typo in documentation of a field in connection record
Significant improvements to the GeoLocation doc
Fixed more typos, reformatted the code examples to remove the
horizontal scroll bars, and removed some redundant sections that were
just outdated copies of information in the auto-generated reference
docs.
Fixed some test canonifier scripts to read from stdin instead of
from a filename specified as a cmd-line argument. This is needed
in order to be able to reliably use them in a pipeline with other
test canonifiers.
Also removed some unused test canonifier scripts.
The generalizedtime support in for certificates now fits more
seamlessly to how the rest of the code was structured and does the
different processing for UTC and generalized times at the beginning,
when checking for them.
The test does not output the common name anymore, since the output
format might change accross openssl versions (inserted the serial
instead).
I also added a bit more error checking for the UTC time case.
Moving to flowunit simplifies the BinPAC constructs by allowing
the use of &oneline instead of relying on regular expressions
which sometimes didn't work as intended.
Addresses BIT-1458
I reworked this a bit:
- Moved the globals into a new Pcap::* namespace, and renamed them
slightly.
- Moved the definitions of the globals into pcap/const.bif.
- Also moved the existing 'snaplen' into Pcap::* and removed
SnapLen() from the PktSrc API (it's really a pcap thing).
- Likewise moved the existing functions precompile_pcap_filter,
install_pcap_filter, and pcap_error, into Pcap::*.
- Did some more refactoring for the pcap code.
* 'master' of https://github.com/knielander/bro:
Refactored patch (removed options, less ambiguous name)
Allow Bro to run in fanout mode.
Allow libpcap buffer size to be set manually.
Allow Bro to run in fanout mode.
Allowed libpcap buffer size to be set via configuration.
* 'topic/jgras/base64-logging' of https://github.com/J-Gras/bro:
Update calls of Base64 functions.
Refactoring of Base64 functions.
I've removed the additional bif for encoding with a connection, as I'm
not sure there's much of a use case for it; we can always add it back
later if it turns out there is. I've also renamed
decode_base64_intern() to decode_base64_conn() to be a bit more
explicit about the difference.