zeek/scripts/base/files/x509
Johanna Amann 64ab1bbd47 Enable OCSP logging by default.
In the past I thought that this is not super interesting. However, it
turns out that this can actually contain a slew of interresting
information - like operating systems querying for the revocation of
software signing certificates, e.g.

So - let's just enable this as a default log for the future.
2021-06-29 09:26:29 +01:00
..
__load__.zeek Enable OCSP logging by default. 2021-06-29 09:26:29 +01:00
certificate-event-cache.zeek Enable OCSP logging by default. 2021-06-29 09:26:29 +01:00
log-ocsp.zeek Enable OCSP logging by default. 2021-06-29 09:26:29 +01:00
main.zeek Split the code that handles X509 event hashing into its own file 2021-05-04 16:44:51 +01:00
README SSL: Update OCSP/SCT scripts and documentation. 2017-07-27 16:22:40 -07:00

Support for X509 certificates with the file analysis framework.
Also supports parsing OCSP requests and responses.