]> git.ipfire.org Git - thirdparty/suricata.git/commit
tls: logging for session resumption 2672/head
authorRay Ruvinskiy <ray.ruvinskiy@arcticwolf.com>
Thu, 24 Nov 2016 17:16:09 +0000 (12:16 -0500)
committerVictor Julien <victor@inliniac.net>
Thu, 20 Apr 2017 07:42:14 +0000 (09:42 +0200)
commit753997310919cc041ac2b4058a7a46037bc2d613
treeae7aae904773216bd246e14369fde8956101b459
parent0dc57c937e3a01dfe3022bd64e4db64caea1a019
tls: logging for session resumption

We assume session resumption has occurred if the Client Hello message
included a session id, we have not seen the server certificate, but
we have seen a Change Cipher Spec message from the server.

Previously, these transactions were not logged at all because the
server cert was never seen.

Ticket: https://redmine.openinfosecfoundation.org/issues/1969
doc/userguide/configuration/suricata-yaml.rst
doc/userguide/output/eve/eve-json-format.rst
src/app-layer-ssl.c
src/app-layer-ssl.h
src/log-tlslog.c
src/output-json-tls.c
suricata.yaml.in