Fatal from git rev 005b150:
1314803689.614709 internal error in
/usr/local/bro-005b150/share/bro/policy/protocols/ssl/validate-certs.bro,
line 20: field value missing (SSL::c$ssl)
Aborted
Looks like a basic case where a sub-hash key is being accessed without
verify the parent hash key exists. I think I fixed with:
if ( !c?$ssl || !c$ssl?$cert || !c$ssl?$cert_chain )
Sorry about that, I've had it fixed locally for a few days but I'm trying to finish up some automatic notice deduplication code before I commit it because I'm modifying some other SSL scripts to use the notice dedup-ing.
.Seth
Looks like this fix didn't make it into the current trunk:
1315414623.768835 internal error in
/usr/local/bro-eds2245/share/bro/policy/protocols/ssl/validate-certs.bro,
line 20: field value missing (SSL::c$ssl)
Line 20: if ( !c$ssl?$cert || !c$ssl?$cert_chain )
I implemented it as part of a larger change that hasn't been committed yet. I'll commit it separately right now.
.Seth