From: RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) Date: Mon, 18 Dec 2023 18:24:00 +0000 (+0000) Subject: Pull request #4129: ssl: stopping inspection once client or server app packet is... X-Git-Tag: 3.1.77.0~4 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cb2296c979c880a7f47b6540ec8a763c98f64a0e;p=thirdparty%2Fsnort3.git Pull request #4129: ssl: stopping inspection once client or server app packet is found Merge in SNORT/snort3 from ~RCONJEEV/snort3:ssl_inspection_perf_fix to master Squashed commit of the following: commit 46806aae62e751ac1d8a6382f2cf1827d38235ae Author: RAGHURAAM CONJEEVARAM UDAYANAN -X (rconjeev - XORIANT CORPORATION at Cisco) Date: Wed Dec 6 14:58:08 2023 +0530 ssl: stopping inspection once client or server app packet is found --- diff --git a/src/service_inspectors/ssl/ssl_inspector.cc b/src/service_inspectors/ssl/ssl_inspector.cc index 5d49d0f49..94197e2db 100644 --- a/src/service_inspectors/ssl/ssl_inspector.cc +++ b/src/service_inspectors/ssl/ssl_inspector.cc @@ -149,7 +149,7 @@ static inline bool SSLPP_is_encrypted(SSL_PROTO_CONF* config, uint32_t ssl_flags { if (config->trustservers) { - if (ssl_flags & SSL_SAPP_FLAG) + if ((ssl_flags & SSL_CAPP_FLAG) || (ssl_flags & SSL_SAPP_FLAG)) return true; }