mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
faa4150154
Closes #1830. * origin/topic/johanna/ocsp-sct-validate: (82 commits) Tiny script changes for SSL. Update CT Log list SSL: Update OCSP/SCT scripts and documentation. Revert "add parameter 'status_type' to event ssl_stapled_ocsp" Revert "parse multiple OCSP stapling responses" SCT: Fix script error when mime type of file unknown. SCT: another memory leak in SCT parsing. SCT validation: fix small memory leak (public keys were not freed) Change end-of-connection handling for validation OCSP/TLS/SCT: Fix a number of test failures. SCT Validate: make caching a bit less aggressive. SSL: Fix type of ssl validation result TLS-SCT: compile on old versions of OpenSSL (1.0.1...) SCT: Add caching support for validation SCT: Add signed certificate timestamp validation script. SCT: Allow verification of SCTs in Certs. SCT: only compare correct OID/NID for Cert/OCSP. SCT: add validation of proofs for extensions and OCSP. SCT: pass timestamp as uint64 instead of time Add CT log information to Bro ... |
||
|---|---|---|
| .. | ||
| expiring-certs.bro | ||
| extract-certs-pem.bro | ||
| heartbleed.bro | ||
| known-certs.bro | ||
| log-hostcerts-only.bro | ||
| notary.bro | ||
| validate-certs.bro | ||
| validate-ocsp.bro | ||
| validate-sct.bro | ||
| weak-keys.bro | ||