mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 08:08:19 +00:00
fb56b22cff
When using DHE or DH-Anon, sever key parameters are now available in scriptland. Also add script to alert on weak certificate keys or weak dh-params.
8 lines
246 B
Text
8 lines
246 B
Text
# @TEST-EXEC: bro -r $TRACES/tls/dhe.pcap %INPUT
|
|
# @TEST-EXEC: mv notice.log notice-1.log
|
|
# @TEST-EXEC: btest-diff notice-1.log
|
|
|
|
@load protocols/ssl/weak-keys
|
|
|
|
redef SSL::notify_weak_keys = ALL_HOSTS;
|
|
redef SSL::notify_minimal_key_length = 4096;
|