mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
833168090a
This commit adds two new bifs, x509_check_hostname and x509_check_cert_hostname. These bifs can be used to check if a given hostname which can, e.g., be sent in a SNI is valid for a specific certificate. This PR furthermore modifies the ssl logs again, and adds information about this to the log-file. Furthermore we now by default remove the server certificate information from ssl.log - I doubt that this is often looked at, it is not present in TLS 1.3, we do still have the SNI, and if you need it you have the information in x509.log. This also fixes a small potential problem in X509.cc assuming there might be SAN-entries that contain null-bytes. Baseline update will follow in another commit. |
||
|---|---|---|
| .. | ||
| 1999.test | ||
| caching-hook.test | ||
| disable-certificate-events-known-certs.zeek | ||
| event-caching.test | ||
| files.test | ||
| log-caching-cluster.test | ||
| log-caching-disabled-cluster.test | ||
| log-caching.test | ||
| signed_certificate_timestamp.test | ||
| signed_certificate_timestamp_ocsp.test | ||
| x509_check_cert_hostname.zeek | ||