/* JA3 and JA4 fingerprints are disabled by default */
#define SSL_CONFIG_DEFAULT_JA3 0
+#ifdef HAVE_JA4
#define SSL_CONFIG_DEFAULT_JA4 0
+#endif
enum SslConfigEncryptHandling {
SSL_CNF_ENC_HANDLE_TRACK_ONLY = 0, /**< disable raw content, continue tracking */
*/
void SSLEnableJA4(void)
{
+ // only caller has #ifdef HAVE_JA4
if (g_disable_hashing || ssl_config.disable_ja4) {
return;
}
{ "client", LOG_TLS_FIELD_CLIENT },
{ "client_certificate", LOG_TLS_FIELD_CLIENT_CERT },
{ "client_chain", LOG_TLS_FIELD_CLIENT_CHAIN },
+ // accept if as nop if we do not HAVE_JA4
{ "ja4", LOG_TLS_FIELD_JA4 },
{ "subjectaltname", LOG_TLS_FIELD_SUBJECTALTNAME },
{ "client_alpns", LOG_TLS_FIELD_CLIENT_ALPNS },