diff --git a/doc/userguide/configuration/suricata-yaml.rst b/doc/userguide/configuration/suricata-yaml.rst index 6da5b46d62..c91ddbe3ca 100644 --- a/doc/userguide/configuration/suricata-yaml.rst +++ b/doc/userguide/configuration/suricata-yaml.rst @@ -388,6 +388,8 @@ For more advanced configuration options, see :ref:`Eve JSON Output `. +.. _suricata-yaml-outputs-tls: + TLS parameters and certificates logging (tls.log) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/doc/userguide/rules/tls-keywords.rst b/doc/userguide/rules/tls-keywords.rst index 5f6dab8b31..9d83b68194 100644 --- a/doc/userguide/rules/tls-keywords.rst +++ b/doc/userguide/rules/tls-keywords.rst @@ -229,7 +229,8 @@ The tls.fingerprint buffer is lower case so you must use lower case letters for tls.store --------- -store TLS/SSL certificate on disk +store TLS/SSL certificate on disk. +The location can be specified in the `output.tls-store.certs-log-dir` parameter of the yaml configuration file, cf :ref:`suricata-yaml-outputs-tls`.. ssl_state ---------