zeek/scripts/base
Bernhard Amann 6d73b8c57e Fix x509_extension event.
The event now really returns the extension. If openssl supports printing
it, it is converted into the openssl ascii output.

The output does not always look pretty because it can contain newlines.

New event syntax:
event x509_extension(c: connection, is_orig: bool, cert:X509, extension: X509_extension_info)

Example output for extension:
  [name=X509v3 Extended Key Usage,
    short_name=extendedKeyUsage,
    oid=2.5.29.37,
    critical=F,
    value=TLS Web Server Authentication, TLS Web Client Authentication]
  [name=X509v3 Certificate Policies,
   short_name=certificatePolicies,
   oid=2.5.29.32,
   critical=F,
   value=Policy: 1.3.6.1.4.1.6449.1.2.1.3.4^J  CPS: https://secure.comodo.com/CPS^J]
2014-01-27 10:24:57 -08:00
..
files Add more script package README files 2013-10-23 16:36:14 -05:00
frameworks Merge remote-tracking branch 'origin/topic/jazoff/notice_file_info' 2014-01-20 12:01:44 -08:00
misc Add UDP support to the checksum offload detection script. 2013-10-24 15:21:03 -04:00
protocols Tweak to SMTP script to adjust for new string slicing behaviour. 2013-12-04 13:45:46 -08:00
utils Return the Dir module to file name tracking instead of inode tracking. 2013-10-29 11:09:55 -04:00
init-bare.bro Fix x509_extension event. 2014-01-27 10:24:57 -08:00
init-default.bro Fix typos and formatting in init-bare.bro and init-default.bro 2013-10-20 01:32:17 -05:00