Added by Eric Leblond about 14 years ago. Updated over 13 years ago.
Description
It would be interesting to dump to disk the certificate matching some rules in a similar way as the file-store keyword.
Files
| tls-storage-v1.tgz (15.3 KB) tls-storage-v1.tgz | Eric Leblond, 07/18/2012 04:26 AM | ||
| tls-storage-v1.1.tgz (17 KB) tls-storage-v1.1.tgz | Eric Leblond, 07/18/2012 09:19 AM | ||
| tls-storage-v1.2.tgz (17.2 KB) tls-storage-v1.2.tgz | Eric Leblond, 07/18/2012 11:19 AM |
Implementation is available in the attached archive.
Adding an update version of the patchset. It now dumps the whole certificates chain in the PEM file.
tls-storage-v1.2 fixes two memleaks.
Pull request for #443 and #444 sent on github: https://github.com/inliniac/suricata/pull/1
Merged, thanks Eric!