[Bro] When is the file hash value available for the X509 certificate?

Michał Purzyński michalpurzynski1 at gmail.com
Thu Dec 6 09:58:32 PST 2018


Yeah, it works for me. How complicated would it be to add everything to the ssl log, out of curiosity?

> On Dec 6, 2018, at 10:05 AM, Johanna Amann <johanna at icir.org> wrote:
> 
> Hi Michal,
> 
>> Ideally I would just add that hash to the x509 as an extra field and
>> have the best of both worlds (and possibly the fuid as well).
> 
> One small additional question here - does the solution that you have now
> satisfy this, or did you want the information in some other log-file (e.g.
> ssl.log)?
> 
> Johanna



More information about the Bro mailing list