Skip to content

Commit

Permalink
tls: fix tls_cert_subject prefilter bug
Browse files Browse the repository at this point in the history
If check in prefilter was checking that issuer was non-NULL, when
it in fact should be checking subject.
  • Loading branch information
thus authored and victorjulien committed Dec 16, 2016
1 parent 10c9322 commit ffcb4ad
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/detect-engine-tls.c
Original file line number Diff line number Diff line change
Expand Up @@ -215,7 +215,7 @@ static void PrefilterTxTlsSubject(DetectEngineThreadCtx *det_ctx, const void *pe
const MpmCtx *mpm_ctx = (MpmCtx *)pectx;
SSLState *ssl_state = f->alstate;

if (ssl_state->server_connp.cert0_issuerdn == NULL)
if (ssl_state->server_connp.cert0_subject == NULL)
return;

const uint8_t *buffer = (const uint8_t *)ssl_state->server_connp.cert0_subject;
Expand Down

0 comments on commit ffcb4ad

Please sign in to comment.