]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect/cert: Use client side certs
authorJeff Lucovsky <jlucovsky@oisf.net>
Mon, 19 Dec 2022 13:51:31 +0000 (08:51 -0500)
committerVictor Julien <vjulien@oisf.net>
Wed, 21 Dec 2022 09:17:19 +0000 (10:17 +0100)
commitdfcb4295240f5b5fe33cc985857be2dba77c884f
treedbdd8c6bde5e539b6db68e5e6bfab4add39fdec2
parentae192ebae74a9adb630e9ef8644bf6736d0d0323
detect/cert: Use client side certs

Issue: 5516

This commit modifies the detect logic to choose the certificate based on
the flow direction -- to server or to client.
src/detect-tls-cert-fingerprint.c
src/detect-tls-cert-issuer.c
src/detect-tls-cert-serial.c
src/detect-tls-cert-subject.c
src/detect-tls-certs.c
src/detect-tls.c