[Bro] Detection of SSL clients which invalidate server cert

Emmanuel TORQUATO Emmanuel.TORQUATO at monext.net
Wed Apr 15 02:57:22 PDT 2015


Hello,

I am searching a way to detect SSL clients which invalidate the server Cert during the SSL Handshake and refused the SSL connection establishment. Is there a way to do this with Bro? Does ssl_alert event can catch this ?

Thanks,

Regards,

Emmanuel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150415/968b71e8/attachment.html 


More information about the Bro mailing list