Pull request #4875: http_inspect: publish OPPORTUNISTIC_TLS

Merge in SNORT/snort3 from ~ADMAMOLE/snort3:o_tls to master

Squashed commit of the following:

commit 93e0c8d216c85fdbcdf1a33bc71c7ca5e785f99c
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Tue Aug 19 15:46:22 2025 -0400

    http_inspect: publish OPPORTUNISTIC_TLS

diff --git a/src/service_inspectors/http_inspect/http_msg_header.cc b/src/service_inspectors/http_inspect/http_msg_header.cc
index 162e232cf35b8935d58db8d699317d9db5edf26d..48726ca850fe8528f278c62c50d243e0ddffe763 100755 (executable)
--- a/src/service_inspectors/http_inspect/http_msg_header.cc
+++ b/src/service_inspectors/http_inspect/http_msg_header.cc
@@ -29,6 +29,7 @@
 #include "file_api/file_flows.h"
 #include "file_api/file_service.h"
 #include "hash/hash_key_operations.h"
+#include "pub_sub/opportunistic_tls_event.h"
 #include "pub_sub/http_events.h"
 #include "pub_sub/http_event_ids.h"
 #include "pub_sub/http_request_body_event.h"
@@ -298,7 +299,9 @@ void HttpMsgHeader::update_flow()
                     "cutover to wizard\n");
             }
 #endif
-
+            Packet* p = DetectionEngine::get_current_packet();
+            OpportunisticTlsEvent event(p, nullptr);
+            DataBus::publish(intrinsic_pub_id, IntrinsicEventIds::OPPORTUNISTIC_TLS, event, p->flow);
             return;
         }
         if ((status_code_num >= 100) && (status_code_num < 200))