[Bro] When is the file hash value available for the X509 certificate?

Johanna Amann johanna at icir.org
Thu Dec 6 07:05:15 PST 2018


Hi Michal,

> Ideally I would just add that hash to the x509 as an extra field and
> have the best of both worlds (and possibly the fuid as well).

One small additional question here - does the solution that you have now
satisfy this, or did you want the information in some other log-file (e.g.
ssl.log)?

Johanna


More information about the Bro mailing list