zeek/scripts/base/protocols/ssl
Robin Sommer 201fc7b25a Merge remote-tracking branch 'origin/topic/bernhard/ssl-analyzer'
* origin/topic/bernhard/ssl-analyzer:
  Fix a few failing tests
  Add very basic ocsp stapling support.
  Add documentation, consts and tests for the new events.
  Support parsing of several TLS extensions.
  Make SSL/TLS version detection less brittle.
  Nicer notices for heartbleed.
  rip out state handline from ssl analyzer.
  enable detection of encrypted heartbleeds.
  also extract payload data in ssl_heartbeat
  add to local.bro, add disclaimer
  make tls heartbeat messages a bit better.
  fix tabs.
  polish script and probably detect encrypted attacks too.
  detect and alert on simple case of heartbleed
  default to TLS when not being able to determine version
  add is_orig to heartbeat event
  Throw new event for heartbeat messages.

BIT-1178 #merged
2014-04-24 17:04:56 -07:00
..
__load__.bro Very basic file-analyzer for x509 certificates. Mostly ripped from 2013-09-16 14:08:22 -07:00
consts.bro Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
dpd.sig update dpd for tls 1.2 2014-04-10 08:12:02 -07:00
files.bro Adapt SSL analyzer to generate file analysis handles itself. 2014-04-23 16:59:27 -05:00
main.bro Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
mozilla-ca-list.bro Update mozilla root bundle 2014-02-28 03:40:18 -08:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00

Support for Secure Sockets Layer (SSL) protocol analysis.