zeek/scripts/base/protocols/ssl
Johanna Amann 401e6c9102 Extend ssl dpd signature to allow alert before server_hello.
The alert in this case is caused by the server name in the SNI not being
recognized by the server, which triggers an alert. Since the server is
an apache, and this might happen reasonably often, the new signature
allows one TLS alert before the server hello is expected.
2015-10-22 13:36:21 -07:00
..
__load__.bro Very basic file-analyzer for x509 certificates. Mostly ripped from 2013-09-16 14:08:22 -07:00
consts.bro Small changes to iana tls registry. 2015-07-16 16:40:35 -07:00
dpd.sig Extend ssl dpd signature to allow alert before server_hello. 2015-10-22 13:36:21 -07:00
files.bro a few more small script-level fixes 2015-03-18 13:26:46 -07:00
main.bro Merge remote-tracking branch 'origin/topic/johanna/dtls' 2015-03-23 12:40:38 -07:00
mozilla-ca-list.bro Updating the Mozilla root certs. 2015-06-02 11:51:08 -04:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00

Support for Secure Sockets Layer (SSL) protocol analysis.