[Bro] Does x509.log contain the raw certificate?

[anthony kasza]

The certificates are not contained in any log file, just certificate meta
data. To enable certificate extraction you need to enable the files
framework which will write certificates to disk.

-AK

On Nov 19, 2016 2:53 PM, "Robert Harrelson" <bobharrelsons at gmail.com> wrote:

> The log file x509.log contains parsed information from the X.509
> certificate. However, I would like to know if the x509.log file contains
> the raw X.509 certificate itself. If yes, how do I extract the certificate
> from the log, not in real-time? Thanks
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161119/f1cec3bb/attachment.html