|
|
@ -157,7 +157,7 @@ static int DetectTlsCertsSetup(DetectEngineCtx *de_ctx, Signature *s,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static int g_tls_cert_buffer_id = 0;
|
|
|
|
static int g_tls_cert_buffer_id = 0;
|
|
|
|
#define BUFFER_NAME "tls_validity"
|
|
|
|
#define BUFFER_NAME "tls:server_cert_done:generic"
|
|
|
|
#define KEYWORD_ID DETECT_TLS_CHAIN_LEN
|
|
|
|
#define KEYWORD_ID DETECT_TLS_CHAIN_LEN
|
|
|
|
#define KEYWORD_NAME "tls.cert_chain_len"
|
|
|
|
#define KEYWORD_NAME "tls.cert_chain_len"
|
|
|
|
#define KEYWORD_DESC "match TLS certificate chain length"
|
|
|
|
#define KEYWORD_DESC "match TLS certificate chain length"
|
|
|
@ -252,9 +252,6 @@ void DetectTlsCertChainLenRegister(void)
|
|
|
|
sigmatch_table[KEYWORD_ID].Setup = DetectTLSCertChainLenSetup;
|
|
|
|
sigmatch_table[KEYWORD_ID].Setup = DetectTLSCertChainLenSetup;
|
|
|
|
sigmatch_table[KEYWORD_ID].Free = DetectTLSCertChainLenFree;
|
|
|
|
sigmatch_table[KEYWORD_ID].Free = DetectTLSCertChainLenFree;
|
|
|
|
|
|
|
|
|
|
|
|
DetectAppLayerInspectEngineRegister(BUFFER_NAME, ALPROTO_TLS, SIG_FLAG_TOCLIENT,
|
|
|
|
|
|
|
|
TLS_STATE_SERVER_CERT_DONE, DetectEngineInspectGenericList, NULL);
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
g_tls_cert_buffer_id = DetectBufferTypeGetByName(BUFFER_NAME);
|
|
|
|
g_tls_cert_buffer_id = DetectBufferTypeGetByName(BUFFER_NAME);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|