zeek/scripts/base/protocols/ssl
Bernhard Amann 0d50b8b04f Change x509 log - now certificates are only logged once per hour.
Add parsing of several more types to SAN extension.

Make error messages of x509 file analyzer more useful.

Fix file ID generation.

You apparently have to be very careful which EndOfFile function of
the file analysis framework you call... otherwhise it might try
to close another file id. This took me quite a while to find.

addresses BIT-953, BIT-760, BIT-1150
2014-03-13 00:05:48 -07:00
..
__load__.bro Very basic file-analyzer for x509 certificates. Mostly ripped from 2013-09-16 14:08:22 -07:00
consts.bro new TLS constants from https://tools.ietf.org/html/draft-bmoeller-tls-downgrade-scsv-01 2014-02-21 11:24:03 -08:00
dpd.sig Moved DPD signatures into script specific directories. 2013-07-09 22:44:55 -04:00
files.bro Change x509 log - now certificates are only logged once per hour. 2014-03-13 00:05:48 -07:00
main.bro X509 file analyzer nearly done. Verification and most other policy scripts 2014-03-03 17:07:50 -08:00
mozilla-ca-list.bro Adding source and original copyright statement to Mozilla cert list. 2013-11-01 05:24:43 -07:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00

Support for Secure Sockets Layer (SSL) protocol analysis.