Pull request #4129: ssl: stopping inspection once client or server app packet is...

Merge in SNORT/snort3 from ~RCONJEEV/snort3:ssl_inspection_perf_fix to master

Squashed commit of the following:

commit 46806aae62e751ac1d8a6382f2cf1827d38235ae
Author: RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) <rconjeev@cisco.com>
Date:   Wed Dec 6 14:58:08 2023 +0530

    ssl: stopping inspection once client or server app packet is found

diff --git a/src/service_inspectors/ssl/ssl_inspector.cc b/src/service_inspectors/ssl/ssl_inspector.cc
index 5d49d0f49cdb04864b419398fa3ec06412a57f3a..94197e2db1df81dfa82ebe6c7ab665ec0d91ba3c 100644 (file)
--- a/src/service_inspectors/ssl/ssl_inspector.cc
+++ b/src/service_inspectors/ssl/ssl_inspector.cc
@@ -149,7 +149,7 @@ static inline bool SSLPP_is_encrypted(SSL_PROTO_CONF* config, uint32_t ssl_flags
 {
     if (config->trustservers)
     {
-        if (ssl_flags & SSL_SAPP_FLAG)
+        if ((ssl_flags & SSL_CAPP_FLAG) || (ssl_flags & SSL_SAPP_FLAG))
             return true;
     }