validate-certs.bro error

Development
1

Fatal from git rev 005b150:
1314803689.614709 internal error in
/usr/local/bro-005b150/share/bro/policy/protocols/ssl/validate-certs.bro,
line 20: field value missing (SSL::c$ssl)
Aborted

Looks like a basic case where a sub-hash key is being accessed without
verify the parent hash key exists. I think I fixed with:
if ( !c?$ssl || !c$ssl?$cert || !c$ssl?$cert_chain )

2

Sorry about that, I've had it fixed locally for a few days but I'm trying to finish up some automatic notice deduplication code before I commit it because I'm modifying some other SSL scripts to use the notice dedup-ing.

  .Seth

3

Looks like this fix didn't make it into the current trunk:

1315414623.768835 internal error in
/usr/local/bro-eds2245/share/bro/policy/protocols/ssl/validate-certs.bro,
line 20: field value missing (SSL::c$ssl)

Line 20: if ( !c$ssl?$cert || !c$ssl?$cert_chain )

4

I implemented it as part of a larger change that hasn't been committed yet. I'll commit it separately right now.

  .Seth