diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2025-01-06 11:04:50 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-01-06 11:04:50 +0100 |
| commit | cae9fb9989838f213eeb857b8fc4bbeac6940049 (patch) | |
| tree | 1f44410c9362d8ff41f6f41916b37186092293f2 /example/ndpiReader.c | |
| parent | 19e531e20b5b8edf5952ddadff2d21106beae7e8 (diff) | |
TLS: remove ESNI support (#2648)
ESNI has been superseded by ECH for years, now.
See: https://blog.cloudflare.com/encrypted-client-hello/
Set the existing flow risk if we still found this extension.
Diffstat (limited to 'example/ndpiReader.c')
| -rw-r--r-- | example/ndpiReader.c | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/example/ndpiReader.c b/example/ndpiReader.c index 08e0023f2..a1eae008a 100644 --- a/example/ndpiReader.c +++ b/example/ndpiReader.c @@ -2176,13 +2176,6 @@ static void printFlow(u_int32_t id, struct ndpi_flow_info *flow, u_int16_t threa if(flow->ssh_tls.tls_issuerDN) fprintf(out, "[Issuer: %s]", flow->ssh_tls.tls_issuerDN); if(flow->ssh_tls.tls_subjectDN) fprintf(out, "[Subject: %s]", flow->ssh_tls.tls_subjectDN); - if(flow->ssh_tls.encrypted_sni.esni) { - char unknown_cipher[8]; - fprintf(out, "[ESNI: %s]", flow->ssh_tls.encrypted_sni.esni); - fprintf(out, "[ESNI Cipher: %s]", - ndpi_cipher2str(flow->ssh_tls.encrypted_sni.cipher_suite, unknown_cipher)); - } - if(flow->ssh_tls.encrypted_ch.version != 0) { fprintf(out, "[ECH: version 0x%x]", flow->ssh_tls.encrypted_ch.version); } |