tls: do not break custom fields when enabling JA4

Ticket: 7286

diff --git a/src/output-json-tls.c b/src/output-json-tls.c
index 88d6bdbda0fd2cadc621a2ab2ec13341c6a8adbd..c91e80863f71fd209a2bf227753f0d0ee5d57e62 100644 (file)
--- a/src/output-json-tls.c
+++ b/src/output-json-tls.c
@@ -592,7 +592,7 @@ static OutputTlsCtx *OutputTlsInitCtx(ConfNode *conf)
     /* In 7.0.x, ja4 hash is only logged when requested */
     const char *ja4 = ConfNodeLookupChildValue(conf, "ja4");
     if (ja4 && ConfValIsTrue(ja4)) {
-        tls_ctx->fields = LOG_TLS_FIELD_JA4;
+        tls_ctx->fields |= LOG_TLS_FIELD_JA4;
     }
 
     const char *session_resumption = ConfNodeLookupChildValue(conf, "session-resumption");