mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
b02f22a667
This commit changes the SSL and X.509 logging formats to something that, hopefully, slowly approaches what they will look like in the future. X.509 log is not yet deduplicated; this will come in the future. This commit introduces two new options, which determine if certificate issuers and subjects are still logged in ssl.log. The default is to have the host subject/issuer logged, but to remove client-certificate information. Client-certificates are not a typically used feature nowadays. |
||
|---|---|---|
| .. | ||
| expiring-certs.zeek | ||
| extract-certs-pem.zeek | ||
| heartbleed.zeek | ||
| known-certs.zeek | ||
| log-hostcerts-only.zeek | ||
| notary.zeek | ||
| validate-certs.zeek | ||
| validate-ocsp.zeek | ||
| validate-sct.zeek | ||
| weak-keys.zeek | ||