Skip to content

[Packetbeat] Add SHA1 Fingerprints of TLS Certificates #8180

Closed
@andrewkroh

Description

As a user I'd like to be able to search for certificates based on SHA1 fingerprints. For example if I want to query for certificates matching a SSL blacklist like https://sslbl.abuse.ch/ then I need to have a fingerprint in Elasticsearch.

Packetbeat should probably also support SHA256 hashing as well. Some apps are moving to using that.

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions