From: Adrian Mamolea (admamole) <admamole@cisco.com>
Date: Tue, 26 Aug 2025 21:10:17 +0000 (+0000)
Subject: Pull request #4875: http_inspect: publish OPPORTUNISTIC_TLS
X-Git-Tag: 3.9.5.0~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bf0aef390e29445dcaa050b9029dbfa9cd933f45;p=thirdparty%2Fsnort3.git

Pull request #4875: http_inspect: publish OPPORTUNISTIC_TLS

Merge in SNORT/snort3 from ~ADMAMOLE/snort3:o_tls to master

Squashed commit of the following:

commit 93e0c8d216c85fdbcdf1a33bc71c7ca5e785f99c
Author: Adrian Mamolea <admamole@cisco.com>
Date:   Tue Aug 19 15:46:22 2025 -0400

    http_inspect: publish OPPORTUNISTIC_TLS
---

diff --git a/src/service_inspectors/http_inspect/http_msg_header.cc b/src/service_inspectors/http_inspect/http_msg_header.cc
index 162e232cf..48726ca85 100755
--- a/src/service_inspectors/http_inspect/http_msg_header.cc
+++ b/src/service_inspectors/http_inspect/http_msg_header.cc
@@ -29,6 +29,7 @@
 #include "file_api/file_flows.h"
 #include "file_api/file_service.h"
 #include "hash/hash_key_operations.h"
+#include "pub_sub/opportunistic_tls_event.h"
 #include "pub_sub/http_events.h"
 #include "pub_sub/http_event_ids.h"
 #include "pub_sub/http_request_body_event.h"
@@ -298,7 +299,9 @@ void HttpMsgHeader::update_flow()
                     "cutover to wizard\n");
             }
 #endif
-
+            Packet* p = DetectionEngine::get_current_packet();
+            OpportunisticTlsEvent event(p, nullptr);
+            DataBus::publish(intrinsic_pub_id, IntrinsicEventIds::OPPORTUNISTIC_TLS, event, p->flow);
             return;
         }
         if ((status_code_num >= 100) && (status_code_num < 200))