From 1076455c01bfcfa51b24ff8d681e65fd00047dbd Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Mon, 14 May 2018 21:40:27 +0200 Subject: Added ndpi_set_detection_preferences() APi call --- src/lib/protocols/ssl.c | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) (limited to 'src/lib/protocols/ssl.c') diff --git a/src/lib/protocols/ssl.c b/src/lib/protocols/ssl.c index adb0e9cf4..aa649f579 100644 --- a/src/lib/protocols/ssl.c +++ b/src/lib/protocols/ssl.c @@ -225,9 +225,11 @@ int getSSLcertificate(struct ndpi_detection_module_struct *ndpi_struct, } if(num_dots >= 2) { - stripCertificateTrailer(buffer, buffer_len); - snprintf(flow->protos.ssl.server_certificate, - sizeof(flow->protos.ssl.server_certificate), "%s", buffer); + if(!ndpi_struct->disable_metadata_export) { + stripCertificateTrailer(buffer, buffer_len); + snprintf(flow->protos.ssl.server_certificate, + sizeof(flow->protos.ssl.server_certificate), "%s", buffer); + } return(1 /* Server Certificate */); } } @@ -289,9 +291,11 @@ int getSSLcertificate(struct ndpi_detection_module_struct *ndpi_struct, buffer[len] = '\0'; stripCertificateTrailer(buffer, buffer_len); - snprintf(flow->protos.ssl.client_certificate, - sizeof(flow->protos.ssl.client_certificate), "%s", buffer); - + if(!ndpi_struct->disable_metadata_export) { + snprintf(flow->protos.ssl.client_certificate, + sizeof(flow->protos.ssl.client_certificate), "%s", buffer); + } + /* We're happy now */ return(2 /* Client Certificate */); } -- cgit v1.2.3