zeek/scripts/base/protocols/ssl
Johanna Amann a6edbf8bcd Fix parsing of version field in SSLv2 client hello
It turns out that, for probably a long time, we have reported an
incorrect version when parsing an SSLv2 client hello. We always reported
this as SSLv2, no matter which version the client hello actually
contained.

This bug probably went unnoticed for a long time, as SSLv2 is
essentially unused nowadays, and as this field does not show up in the
default logs.

This was found due to a baseline difference when writing the Spicy SSL
analyzer.
2024-08-22 13:14:24 +01:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
consts.zeek Update TLS consts, mainly new named curves. 2024-05-23 14:50:36 +01:00
ct-list.zeek Update Mozilla CA list and CT list 2024-07-23 16:05:30 +01:00
dpd.sig Match DPD TLS signature on one-sided connections. 2022-02-01 16:51:21 +00:00
files.zeek Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
main.zeek Fix parsing of version field in SSLv2 client hello 2024-08-22 13:14:24 +01:00
mozilla-ca-list.zeek Update Mozilla CA list and CT list 2024-07-23 16:05:30 +01:00
README SSL: Update OCSP/SCT scripts and documentation. 2017-07-27 16:22:40 -07:00

Support for Secure Sockets Layer (SSL)/Transport Layer Security(TLS) protocol analysis.