Gavin Spearhead created BIT-1502:
------------------------------------
Summary: X509 doesn't log all certificates
Key: BIT-1502
URL: https://bro-tracker.atlassian.net/browse/BIT-1502
Project: Bro Issue Tracker
Issue Type: Problem
Components: Bro
Affects Versions: 2.4
Environment: test setup
Reporter: Gavin Spearhead
I'm trying to use bro to log all X509 certificate information for SSL / HTTPS
connections. It seems however that not all certificates are logged in the
x509.log. (or in files.log). However the connections are visible in the
ssl.log. The setup is a basic install.
E.g. https://facebook.com and https://twitter.com are not logged, whereas
https://tweakers.net or https://api.twitter.com are logged. Is this a bug,
feature? Any idea how to ensure all the certificates are stored?
--
This message was sent by Atlassian JIRA
(v7.0.0-OD-08-005#70107)
_______________________________________________
bro-dev mailing list
bro-dev@bro.org
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
