Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/scripts/base/protocols/ssl
History
Johanna Amann 833168090a Add ability to check if hostname is valid for a specific cert 
This commit adds two new bifs, x509_check_hostname and
x509_check_cert_hostname. These bifs can be used to check if a given
hostname which can, e.g., be sent in a SNI is valid for a specific
certificate.

This PR furthermore modifies the ssl logs again, and adds information
about this to the log-file. Furthermore we now by default remove the
server certificate information from ssl.log - I doubt that this is often
looked at, it is not present in TLS 1.3, we do still have the SNI, and
if you need it you have the information in x509.log.

This also fixes a small potential problem in X509.cc assuming there
might be SAN-entries that contain null-bytes.

Baseline update will follow in another commit.
2021-06-29 15:00:48 +01:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
consts.zeek Update SSL consts 2021-01-20 14:14:47 +00:00
ct-list.zeek Update Mozilla Root Store 2020-12-09 21:46:32 +00:00
dpd.sig SSL: update dpd signature for TLS1.3 2017-04-05 08:58:08 -07:00
files.zeek Add ability to check if hostname is valid for a specific cert 2021-06-29 15:00:48 +01:00
main.zeek Add ssl_history field to ssl.log 2021-06-29 14:10:02 +01:00
mozilla-ca-list.zeek Update Mozilla Root Store 2020-12-09 21:46:32 +00:00
README SSL: Update OCSP/SCT scripts and documentation. 2017-07-27 16:22:40 -07:00

README 

Support for Secure Sockets Layer (SSL)/Transport Layer Security(TLS) protocol analysis.