From: Jason Ish <jish@oisf.net>
Date: Wed, 8 May 2024 23:13:05 +0000 (-0600)
Subject: sslbl/blacklist: update to more modern URL
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=24acbffe92b9eeb557af2157083669c768d80d10;p=thirdparty%2Fsuricata-intel-index.git

sslbl/blacklist: update to more modern URL

Uses Suricata 4.1 features.
---

diff --git a/index.yaml b/index.yaml
index 8569bfa..9f7ed07 100644
--- a/index.yaml
+++ b/index.yaml
@@ -90,7 +90,7 @@ sources:
       The SSL Blacklist (SSLBL) is a project of abuse.ch with the goal of detecting malicious SSL connections, by identifying and blacklisting SSL certificates used by botnet C&C servers. In addition, SSLBL identifies JA3 fingerprints that helps you to detect & block malware botnet C&C communication on the TCP layer.
     vendor: Abuse.ch
     license: CC0-1.0
-    url: https://sslbl.abuse.ch/blacklist/sslblacklist.rules
+    url: https://sslbl.abuse.ch/blacklist/sslblacklist_tls_cert.tar.gz
     checksum: false
 
   sslbl/ja3-fingerprints: