Added NDPI_TLS_CERTIFICATE_ABOUT_TO_EXPIRE flow risk

Added ndpi_set_tls_cert_expire_days() API call to modify the number of days for triggering the above alert that by default is set to 30 days

1 files changed, 12 insertions, 0 deletions

diff --git a/src/include/ndpi_api.h.in b/src/include/ndpi_api.h.in
index 271b73194..e0b813597 100644
--- a/src/include/ndpi_api.h.in
+++ b/src/include/ndpi_api.h.in
@@ -964,6 +964,18 @@ extern "C" {
 				    ndpi_protocol_category_t *category,
 				    ndpi_protocol_breed_t *breed);
 
+  /**
+   * Specifies the threshold used to trigger the NDPI_TLS_CERTIFICATE_ABOUT_TO_EXPIRE
+   * flow risk that by default is set to 30 days
+   *
+   * @par    ndpi_struct  = the struct created for the protocol detection
+   * @par    days         = the number of days threshold for emitting the alert
+   *                        
+   */
+  void ndpi_set_tls_cert_expire_days(struct ndpi_detection_module_struct *ndpi_str,
+				     u_int8_t days);
+
+  
   /* Utility functions to set ndpi malloc/free/print wrappers */
   void set_ndpi_malloc(void* (*__ndpi_malloc)(size_t size));
   void set_ndpi_free(void  (*__ndpi_free)(void *ptr));