zeek/scripts/policy
Johanna Amann eb50b3fed1 Change end-of-connection handling for validation
Move from using CCS (before: established) to just doing certificate
validation at the end of the connection.

This is (again) more robust in the case of aborted connection. I am
moving this into a hook because of the complexity of the
end-of-connection handling for SSL.

This should probably be extended to not just handle SSL validation, but
all other logging constructs that are currently called in _established.
2017-05-11 22:50:20 -07:00
..
files/x509 OCSP: re-enable logging, fix tests, fix x509 issue 2017-02-10 17:05:12 -08:00
frameworks Updated Windows version detection to include Windows 10 2017-02-21 15:06:39 -05:00
integration Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
misc Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
protocols Change end-of-connection handling for validation 2017-05-11 22:50:20 -07:00
tuning Move DataSeries and ElasticSearch into plugins. 2014-08-08 18:32:21 -07:00