Project

General

Profile

Actions
Copy link

Feature #1903

closed

tls: tls_cert_valid and tls_cert_expired keywords

Added by Victor Julien over 7 years ago. Updated over 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Mats Klepsland
Target version:
3.2beta1
Effort:
Difficulty:
Label:

Description

Add keywords "tls_cert_valid" and "tls_cert_expired" to match if a certificate has expired or not.

Example usage:

alert tls any any -> any any (msg:"Valid tls certificate"; tls_cert_valid; sid:1;)
alert tls any any -> any any (msg:"Expired tls certificate"; tls_cert_expired; sid:2;)

Actions
Copy link
 #1

Updated by Victor Julien over 7 years ago

  • Status changed from Assigned to Closed
Actions
Copy link

Also available in: Atom PDF