ja3: Mention LibNSS dependency for JA3

diff --git a/doc/userguide/rules/ja3-keywords.rst b/doc/userguide/rules/ja3-keywords.rst
index c77b9f390635fe44daeb423a143aa60ab1451b7b..c80063f2186b377af2a3bd9b89b1d3c6158457f7 100644 (file)
--- a/doc/userguide/rules/ja3-keywords.rst
+++ b/doc/userguide/rules/ja3-keywords.rst
@@ -5,6 +5,8 @@ Suricata comes with a JA3 integration (https://github.com/salesforce/ja3). JA3 i
 
 JA3 must be enabled in the Suricata config file (set 'app-layer.protocols.tls.ja3-fingerprints' to 'yes').
 
+JA3 also requires Suricata to be built with LibNSS support.
+
 ja3.hash
 --------
 

diff --git a/src/app-layer-ssl.c b/src/app-layer-ssl.c
index 0adc077d866fed49bdb407cf5941f48c81750b69..3c5e7d46678a7a728d611c1ea727f9ccf42fdfe9 100644 (file)
--- a/src/app-layer-ssl.c
+++ b/src/app-layer-ssl.c
@@ -2943,7 +2943,7 @@ void RegisterSSLParsers(void)
 #ifndef HAVE_NSS
         if (ssl_config.enable_ja3) {
             SCLogWarning(SC_WARN_NO_JA3_SUPPORT,
-                         "no MD5 calculation support built in, disabling JA3");
+                         "no MD5 calculation support built in (LibNSS), disabling JA3");
             ssl_config.enable_ja3 = 0;
         }
 #else

diff --git a/src/util-ja3.c b/src/util-ja3.c
index eecf8202452fefec6946c1f06b5e1e4d672df6ec..2152b5f4bb4767653b88d7d9ff3ec5800b959b32 100644 (file)
--- a/src/util-ja3.c
+++ b/src/util-ja3.c
@@ -275,7 +275,7 @@ int Ja3IsDisabled(const char *type)
 #ifndef HAVE_NSS
     else {
         SCLogWarning(SC_WARN_NO_JA3_SUPPORT,
-                     "no MD5 calculation support build in, skipping %s",
+                     "no MD5 calculation support built in (LibNSS), skipping %s",
                      type);
         return 1;
     }