policy/protocols/ssl/log-certs-base64.zeek

This script is used to extract certificates seen on the wire to Zeek log files. The certificates are base64-encoded and written to ssl.log, to the newly added cert field.

Imports

base/files/x509, base/protocols/ssl

Summary

Redefinitions

X509::Info: record

New Fields

X509::Info

cert: string &log &optional

Base64 encoded X.509 certificate.

Detailed Interface