Project

General

Custom queries

Profile

Actions
Copy link

Feature #5516

closed

tls: client cert detection

Added by Victor Julien almost 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
7.0.0-rc1
Effort:
Difficulty:
Label:

Description

Update various cert detection keywords to support client certs.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Feature #1096: tls: client certificate handlingClosedVictor JulienActions
Actions
Copy link
 #4

Updated by Jeff Lucovsky over 2 years ago

These already check the client cert (depending on direction)
- tls.subject
- tls.issuerdn
- tls.fingerprint
- tls_cert_notbefore
- tls_cert_notafter
- tls_cert_expired
- tls_cert_valid

These do not check the client cert and require update:
- tls.cert_fingerprint
- tls.cert_issuer
- tls.certs
- tls.cert_serial
- tls.cert_subject

Not sure about
- tls.store

Actions
Copy link
 #9

Updated by Victor Julien over 2 years ago

  • Status changed from In Review to Closed
  • Priority changed from High to Normal
Actions
Copy link

Also available in: Atom PDF