aboutsummaryrefslogtreecommitdiff
path: root/src/lib/protocols/tls.c
Commit message (Collapse)AuthorAge
...
* Fixed heap overflow in tls esni extraction triggered by manipulated packets.Toni Uhlig2020-06-29
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* TLS: extract JA3 signatures in some corner casesNardi Ivan2020-06-28
| | | | | In some (rare) cases, Client Hello message contains lots of cipher suits.
* Added malformed packet risk supportLuca Deri2020-06-26
|
* Fixes #906Luca Deri2020-06-22
| | | | Packet bins are not printed wehn empty
* Merge pull request #920 from lnslbrty/fix/tls-rdn-crashLuca Deri2020-06-19
|\ | | | | Fixed stack overflow caused by missing length check
| * Fixed stack overflow caused by missing length checkToni Uhlig2020-06-18
| | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | Fixed API documentation: packet tiestamp is expressed in millisecondsLuca Deri2020-06-18
|/
* Added DGA risk for names that look like a DGALuca Deri2020-06-11
|
* Win fixesLuca Deri2020-06-08
|
* Added check in TLS 1.2+ for reporting a risk when TLS is not used to carry HTTPSLuca Deri2020-06-08
|
* Added TLS bounadry checkLuca Deri2020-06-07
|
* Removed some obsolete protocols (battlefield, oscar, pcanywhere, tvants)Luca Deri2020-06-06
|
* Check to avoid allocating twice the esni memoryLuca Deri2020-06-01
|
* Added extra TLS memory boundary checksLuca Deri2020-05-31
|
* Added references to ESNILuca Deri2020-05-29
|
* Added support for Encrypted TLS SNI dissectionLuca Deri2020-05-28
| | | | https://datatracker.ietf.org/doc/draft-ietf-tls-sni-encryption/
* Added check for binary scriptsLuca Deri2020-05-15
| | | | | Added NDPI_HTTP_NUMERIC_IP_HOST risk ndpi_risk moved to 32 bit
* Added NDPI_TLS_CERTIFICATE_EXPIRED, NDPI_TLS_CERTIFICATE_MISMATCH, to ndpi_riskLuca Deri2020-05-15
|
* Invalid TLS checkLuca Deri2020-05-12
|
* Added TLS weak cipher and obsolete protocol version detectionLuca Deri2020-05-10
|
* Added detection of self-signed TLS certificatesLuca Deri2020-05-10
|
* Added TLS issuerDN and subjectDNLuca Deri2020-05-07
|
* Reworked TLS dissector with a certificate RDN sequence readerLuca Deri2020-05-07
|
* Warning fixLuca Deri2020-04-22
|
* Fix some compilation warningsNardi Ivan2020-04-20
|
* TLS initializes version_strPhilippe Antoine2020-04-15
|
* Adds bound check in TLSPhilippe Antoine2020-04-15
|
* tls: fix heap-overflow errorNardi Ivan2020-03-27
|
* tls_supported_versions only if version_str is initializedPhilippe Antoine2020-03-19
| | | | With version_len == (extension_len-1)
* Fix use of uninitialized value in TLSPhilippe Antoine2020-03-19
|
* Fix infinite loop in tlsPhilippe Antoine2020-03-12
|
* Fix snprintf return value check for tlsPhilippe Antoine2020-03-12
|
* Fixed TLS client SNI dissectionLuca Deri2020-02-17
|
* Fix memory invalid access in SMTP and leaks in TLSemanuele-f2020-02-13
|
* Fix possible leakemanuele-f2020-02-13
|
* Added export of TLS supported version in TLS headerLuca Deri2020-02-07
|
* Added TLS ALPN supportLuca Deri2020-02-07
|
* Little enhancementsemanuele-f2020-02-06
|
* Code improvementsLuca Deri2020-02-04
|
* Added further TLS checksLuca2020-01-10
|
* Minor cleanupLuca Deri2020-01-10
|
* Fix for invalid TLS leghtLuca Deri2020-01-09
|
* Added check for preventing TLS misbehaviorLuca Deri2020-01-09
|
* Fix for avoiding misdetection in TLSLuca2020-01-09
|
* Code hardeningLuca Deri2020-01-08
|
* Removed TLS debug code that could have caused crashesLuca Deri2020-01-05
|
* Added packet boundary checksLuca Deri2020-01-05
|
* Minor cleanupLuca Deri2020-01-05
|
* Merge branch 'dev' of https://github.com/ntop/nDPI into devLuca Deri2020-01-05
|\
| * Fix leaks and sha1 certificate detectionemanuele-f2020-01-02
| |