suricata
detect-tls-cert-fingerprint.c File Reference
#include "suricata-common.h"
#include "threads.h"
#include "debug.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-prefilter.h"
#include "detect-content.h"
#include "detect-pcre.h"
#include "detect-tls-cert-fingerprint.h"
#include "flow.h"
#include "flow-util.h"
#include "flow-var.h"
#include "util-debug.h"
#include "util-unittest.h"
#include "util-spm.h"
#include "util-print.h"
#include "stream-tcp.h"
#include "app-layer.h"
#include "app-layer-ssl.h"
#include "util-unittest-helper.h"
#include "tests/detect-tls-cert-fingerprint.c"
Include dependency graph for detect-tls-cert-fingerprint.c:

Go to the source code of this file.

Functions

void DetectTlsFingerprintRegister (void)
 Registration function for keyword: tls.cert_fingerprint. More...
 

Detailed Description

Author
Mats Klepsland mats..nosp@m.klep.nosp@m.sland.nosp@m.@gma.nosp@m.il.co.nosp@m.m

Implements support for tls_cert_fingerprint keyword.

Definition in file detect-tls-cert-fingerprint.c.

Function Documentation

void DetectTlsFingerprintRegister ( void  )

Registration function for keyword: tls.cert_fingerprint.

Definition at line 74 of file detect-tls-cert-fingerprint.c.

References SigTableElmt_::alias, ALPROTO_TLS, Flow_::alstate, SSLStateConnp_::cert0_fingerprint, DetectContentData_::content, DetectContentData_::content_len, SigMatch_::ctx, SigTableElmt_::desc, DETECT_AL_TLS_CERT_FINGERPRINT, DETECT_CONTENT, DETECT_CONTENT_NOCASE, DetectAppLayerInspectEngineRegister2(), DetectAppLayerMpmRegister2(), DetectBufferSetActiveList(), DetectBufferTypeGetByName(), DetectBufferTypeRegisterSetupCallback(), DetectBufferTypeRegisterValidateCallback(), DetectBufferTypeSetDescriptionByName(), DetectEngineInspectBufferGeneric(), DetectSignatureSetAppProto(), DOC_URL, DOC_VERSION, FALSE, DetectContentData_::flags, SigTableElmt_::flags, Signature_::id, Signature_::init_data, InspectionBuffer::inspect, InspectionBufferApplyTransforms(), InspectionBufferGet(), InspectionBufferSetup(), SigTableElmt_::name, SigMatch_::next, PrefilterGenericMpmRegister(), SigTableElmt_::RegisterTests, SC_WARN_POOR_RULE, SCLogWarning, SSLState_::server_connp, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIGMATCH_INFO_STICKY_BUFFER, SIGMATCH_NOOPT, sigmatch_table, SignatureInitData_::smlists, DetectContentData_::spm_ctx, DetectEngineCtx_::spm_global_thread_ctx, SpmDestroyCtx(), SpmInitCtx(), str, TLS_STATE_CERT_READY, TRUE, SigMatch_::type, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: