From: Mats Klepsland <mats.klepsland@gmail.com>
Date: Tue, 17 Jan 2017 08:22:10 +0000 (+0100)
Subject: tls-log: log certificate serial number
X-Git-Tag: suricata-4.0.0-beta1~281
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2e339aa7911b090c11ecef5869df43faa633e2d2;p=thirdparty%2Fsuricata.git

tls-log: log certificate serial number
---

diff --git a/src/log-tlslog.c b/src/log-tlslog.c
index 113a2ccd3b..fc1deddae3 100644
--- a/src/log-tlslog.c
+++ b/src/log-tlslog.c
@@ -86,6 +86,9 @@ static void LogTlsLogExtended(LogTlsLogThread *aft, SSLState * state)
     if (state->client_connp.sni != NULL) {
         MemBufferWriteString(aft->buffer, " SNI='%s'", state->client_connp.sni);
     }
+    if (state->server_connp.cert0_serial != NULL) {
+        MemBufferWriteString(aft->buffer, " SERIAL='%s'", state->server_connp.cert0_serial);
+    }
     switch (state->server_connp.version) {
         case TLS_VERSION_UNKNOWN:
             MemBufferWriteString(aft->buffer, " VERSION='UNDETERMINED'");