ja3: Mention LibNSS dependency for JA3

doc/userguide/rules/ja3-keywords.rst

@@ -5,6 +5,8 @@ Suricata comes with a JA3 integration (https://github.com/salesforce/ja3). JA3 i
 
 JA3 must be enabled in the Suricata config file (set 'app-layer.protocols.tls.ja3-fingerprints' to 'yes').
 
+JA3 also requires Suricata to be built with LibNSS support.
+
 ja3.hash
 --------
 

src/app-layer-ssl.c

@@ -2943,7 +2943,7 @@ void RegisterSSLParsers(void)
 #ifndef HAVE_NSS
         if (ssl_config.enable_ja3) {
             SCLogWarning(SC_WARN_NO_JA3_SUPPORT,
-                         "no MD5 calculation support built in, disabling JA3");
+                         "no MD5 calculation support built in (LibNSS), disabling JA3");
             ssl_config.enable_ja3 = 0;
         }
 #else

src/util-ja3.c

@@ -275,7 +275,7 @@ int Ja3IsDisabled(const char *type)
 #ifndef HAVE_NSS
     else {
         SCLogWarning(SC_WARN_NO_JA3_SUPPORT,
-                     "no MD5 calculation support build in, skipping %s",
+                     "no MD5 calculation support built in (LibNSS), skipping %s",
                      type);
         return 1;
     }