[Bro] x509 error

Johanna Amann johanna at icir.org
Wed Oct 10 05:15:23 PDT 2018


Hi,

could you potentially provide a pcap that shows this and send it to me?

Without that it sadly is quite difficult to say what is going on. The 
error comes more or less directly from OpenSSL - so it does not like 
something in the data structure sent in the certificate message.

Johanna

On 10 Oct 2018, at 1:45, Dk Jack wrote:

> Hi,
> I am seeing very large number of  'Could not parse X509 certificate' 
> errors
> in my weird.log. The ssl cert is sent by the server. Could someone 
> chime in
> on the reasons for this error. Thanks.
>
> Dk.
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro


More information about the Bro mailing list