]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: add (mpm) keyword tls_cert_serial
authorMats Klepsland <mats.klepsland@gmail.com>
Mon, 20 Feb 2017 07:27:23 +0000 (08:27 +0100)
committerVictor Julien <victor@inliniac.net>
Tue, 21 Feb 2017 08:57:55 +0000 (09:57 +0100)
commitd6508e640a2330722011e4cfc39a36f60f735796
treee8ee7057bb3941552a275df9bdf9178787501ee5
parent95864375f2a510b122909923bd0ba0f8c0558d74
detect: add (mpm) keyword tls_cert_serial

Match on TLS certificate serial number using tls_cert_serial
keyword, e.g.:

alert tls any any -> any any (msg:"TLS cert serial test";
        tls_cert_serial; content:"5C:19:B7:B1:32:3B:1C:A1";
        sid:12345;)
src/Makefile.am
src/detect-engine-tls.c
src/detect-engine-tls.h
src/detect-tls-cert-serial.c [new file with mode: 0644]
src/detect-tls-cert-serial.h [new file with mode: 0644]
src/detect.c
src/detect.h