[Bro] get more information from a SSL certificate?

[Bernhard Amann]

On Jan 28, 2014, at 6:01 AM, Seth Hall <seth at icir.org> wrote:

> 
> On Jan 28, 2014, at 5:18 AM, Jessica Smith <jes.smith.bro at aol.com> wrote:
> 
>> is it possible to get the "Certificate Signature Algorithm" and "Subject Public Key Info" from a X.509 certificate?
> 
> Unfortunately our current analyzer doesn't extract much information from certificates.  Bernhard has been working on some changes though that ultimately will split the X.509 code out into a file analyzer which the SSL analyzer will pass certificates to.  He's also greatly expanding the amount of information extracted from certs.

In case you want to be notified when the work on the new certificate analyzer is done, 
you can subscribe to the ticket https://bro-tracker.atlassian.net/browse/BIT-760 which will
be updated when it is done.

Bernhard