zeek/scripts/base/files/x509/main.bro
Bernhard Amann a1f2ab34ac Add verify functionality, including the ability to get the validated
chain. This means that it is now possible to get information about the
root-certificates that were used to secure a connection.

Intermediate commit before changing the script interface again.

addresses BIT-953, BIT-760
2014-03-03 10:49:28 -08:00

32 lines
623 B
Text

@load base/frameworks/files
module X509;
export {
redef enum Log::ID += { LOG };
redef record Files::Info += {
};
}
event x509_cert(f: fa_file, cert_ref: opaque of x509, cert: X509::Certificate)
{
print cert;
}
event x509_extension(f: fa_file, cert_ref: opaque of x509, cert: X509::Certificate, ext: X509::Extension)
{
print ext;
}
event x509_ext_basic_constraints(f: fa_file, cert_ref: opaque of x509, cert: X509::Certificate, ext: X509::BasicConstraints)
{
print ext;
}
event x509_ext_subject_alternative_name(f: fa_file, cert_ref: opaque of x509, cert: X509::Certificate, ext: string_vec)
{
print ext;
}