base/bif/plugins/Zeek_SSL.functions.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Functions

set_keys: function

Set the decryption keys that should be used to decrypt TLS application data in the connection.

set_secret: function

Set the secret that should be used to derive keys for the connection.

set_ssl_established: function

Sets if the SSL analyzer should consider the connection established (handshake finished successfully).

Detailed Interface

Functions

set_keys
Type

function (c: connection, keys: string) : bool

Set the decryption keys that should be used to decrypt TLS application data in the connection.

C

The affected connection

Keys

The key buffer as derived via TLS PRF.

Returns

T on success, F on failure.

set_secret
Type

function (c: connection, secret: string) : bool

Set the secret that should be used to derive keys for the connection. (For TLS 1.2 this is the pre-master secret).

C

The affected connection

Secret

secret to set

Returns

T on success, F on failure.

set_ssl_established
Type

function (c: connection) : bool

Sets if the SSL analyzer should consider the connection established (handshake finished successfully).

C

The SSL connection.

Returns

T on success, F on failure.