From 5b02fd038b4fe95b85ab1b6e6f65d45351173652 Mon Sep 17 00:00:00 2001 From: Shivani Bhardwaj Date: Mon, 14 Oct 2024 10:19:26 +0530 Subject: [PATCH] abuse.ch ruleset: fix replaces syntax The "replaces" key is supposed to be a list. That is how it is interpreted by suricata-update and is used across other sources using it. Fix the yaml syntax to make the entries a list. --- index.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/index.yaml b/index.yaml index 7de3a1b..16f348c 100644 --- a/index.yaml +++ b/index.yaml @@ -97,7 +97,8 @@ sources: license: CC0-1.0 url: https://sslbl.abuse.ch/blacklist/sslblacklist_tls_cert.tar.gz checksum: false - replaces: sslbl/ssl-fp-blacklist + replaces: + - sslbl/ssl-fp-blacklist # Deprecated in favor of abuse.ch/sslbl-blacklist. sslbl/ssl-fp-blacklist: @@ -128,7 +129,8 @@ sources: url: https://sslbl.abuse.ch/blacklist/ja3_fingerprints.tar.gz min-version: 4.1.0 checksum: false - replaces: sslbl/ja3-fingerprints + replaces: + - sslbl/ja3-fingerprints # Deprecated in favor of abuse.ch/sslbl-ja3 sslbl/ja3-fingerprints: -- 2.47.3