zeek/scripts/policy/protocols/ssl
Johanna Amann eb50b3fed1 Change end-of-connection handling for validation
Move from using CCS (before: established) to just doing certificate
validation at the end of the connection.

This is (again) more robust in the case of aborted connection. I am
moving this into a hook because of the complexity of the
end-of-connection handling for SSL.

This should probably be extended to not just handle SSL validation, but
all other logging constructs that are currently called in _established.
2017-05-11 22:50:20 -07:00
..
expiring-certs.bro re-add notice suppression for expiring certificates 2014-06-06 12:15:38 -07:00
extract-certs-pem.bro Merge remote-tracking branch 'origin/fastpath' 2014-05-21 15:59:26 -05:00
heartbleed.bro Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
known-certs.bro Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
log-hostcerts-only.bro Fix missing @load dependencies in some scripts. 2014-04-09 16:32:23 -05:00
notary.bro Merge remote-tracking branch 'origin/topic/jsiwek/deprecation' 2015-01-30 14:37:05 -08:00
ocsp-stapling.bro OCSP: a bunch of whitespace fixes 2017-02-10 17:03:04 -08:00
validate-certs.bro Change end-of-connection handling for validation 2017-05-11 22:50:20 -07:00
validate-ocsp.bro Make OCSP analyzer part of the X.509 analyzer 2017-02-10 17:02:15 -08:00
validate-sct.bro Change end-of-connection handling for validation 2017-05-11 22:50:20 -07:00
weak-keys.bro Merge remote-tracking branch 'origin/topic/johanna/ssl-policy' 2015-03-02 17:19:00 -08:00