Table of Contents
This script is used to extract certificates seen on the wire to Zeek log files. The certificates are base64-encoded and written to ssl.log, to the newly added cert field.
base/files/x509, base/protocols/ssl
X509::Info: record
X509::Info
record
string
&log
&optional
Base64 endoded X.509 certificate.