mirror of
https://github.com/zeek/zeek.git
synced 2025-10-17 14:08:20 +00:00
5dd19f84a7
This is a tiny bit evil because it uses parts of the SSL protocol analyzer in the X.509 certificate parser. Which is the fault of the protocol, which replicates the functionality.
23 lines
795 B
CMake
23 lines
795 B
CMake
|
|
include(BroPlugin)
|
|
|
|
include_directories(BEFORE ${CMAKE_CURRENT_SOURCE_DIR} ${CMAKE_CURRENT_BINARY_DIR})
|
|
|
|
bro_plugin_begin(Bro SSL)
|
|
bro_plugin_cc(SSL.cc DTLS.cc Plugin.cc)
|
|
bro_plugin_bif(types.bif)
|
|
bro_plugin_bif(events.bif)
|
|
bro_plugin_bif(functions.bif)
|
|
bro_plugin_pac(tls-handshake.pac tls-handshake-protocol.pac tls-handshake-analyzer.pac ssl-defs.pac
|
|
proc-client-hello.pac
|
|
proc-server-hello.pac
|
|
proc-certificate.pac
|
|
tls-handshake-signed_certificate_timestamp.pac
|
|
)
|
|
bro_plugin_pac(ssl.pac ssl-dtls-analyzer.pac ssl-analyzer.pac ssl-dtls-protocol.pac ssl-protocol.pac ssl-defs.pac
|
|
proc-client-hello.pac
|
|
proc-server-hello.pac
|
|
proc-certificate.pac
|
|
)
|
|
bro_plugin_pac(dtls.pac ssl-dtls-analyzer.pac dtls-analyzer.pac ssl-dtls-protocol.pac dtls-protocol.pac ssl-defs.pac)
|
|
bro_plugin_end()
|