mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 15:18:20 +00:00
ded98cd373
This is based on commit 2731def9159247e6da8a3191783c89683363689c from the zeek-docs repo.
29 lines
1.6 KiB
ReStructuredText
29 lines
1.6 KiB
ReStructuredText
:tocdepth: 3
|
|
|
|
policy/protocols/ssl/log-certs-base64.zeek
|
|
==========================================
|
|
|
|
This script is used to extract certificates seen on the wire to Zeek log files.
|
|
The certificates are base64-encoded and written to ssl.log, to the newly added cert
|
|
field.
|
|
|
|
:Imports: :doc:`base/files/x509 </scripts/base/files/x509/index>`, :doc:`base/protocols/ssl </scripts/base/protocols/ssl/index>`
|
|
|
|
Summary
|
|
~~~~~~~
|
|
Redefinitions
|
|
#############
|
|
======================================================================================= ==========================================================================
|
|
:zeek:type:`X509::Info`: :zeek:type:`record`
|
|
|
|
:New Fields: :zeek:type:`X509::Info`
|
|
|
|
cert: :zeek:type:`string` :zeek:attr:`&log` :zeek:attr:`&optional`
|
|
Base64 encoded X.509 certificate.
|
|
:zeek:id:`X509::default_max_field_string_bytes`: :zeek:type:`count` :zeek:attr:`&redef` Certificates can be large and we don't want to risk truncating the output.
|
|
======================================================================================= ==========================================================================
|
|
|
|
|
|
Detailed Interface
|
|
~~~~~~~~~~~~~~~~~~
|
|
|