mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 17:18:20 +00:00
c403a7f4e6
This does not yet work for certificates, because this requires some changing the ASN.1 structure before validation (we need to extract the tbscert and remove the SCT extension before). API will change in the future.
17 lines
411 B
Text
17 lines
411 B
Text
|
|
%%{
|
|
#include "analyzer/protocol/ssl/SSL.h"
|
|
#include <openssl/x509.h>
|
|
%%}
|
|
|
|
## Sets if the SSL analyzer should consider the connection established (handshake
|
|
## finished succesfully).
|
|
##
|
|
## c: The SSL connection.
|
|
function set_ssl_established%(c: connection%): any
|
|
%{
|
|
analyzer::Analyzer* sa = c->FindAnalyzer("SSL");
|
|
if ( sa )
|
|
static_cast<analyzer::ssl::SSL_Analyzer*>(sa)->StartEncryption();
|
|
return 0;
|
|
%}
|