[Bro] When is the file hash value available for the X509 certificate?
Michał Purzyński
michalpurzynski1 at gmail.com
Thu Dec 6 09:58:32 PST 2018
Yeah, it works for me. How complicated would it be to add everything to the ssl log, out of curiosity?
> On Dec 6, 2018, at 10:05 AM, Johanna Amann <johanna at icir.org> wrote:
>
> Hi Michal,
>
>> Ideally I would just add that hash to the x509 as an extra field and
>> have the best of both worlds (and possibly the fuid as well).
>
> One small additional question here - does the solution that you have now
> satisfy this, or did you want the information in some other log-file (e.g.
> ssl.log)?
>
> Johanna
More information about the Bro
mailing list