certfetch

Documentation

Index

• func PluginNfqueueHandler(mess dispatch.NfqueueMessage, ctid uint32, newSession bool) dispatch.NfqueueResult
• func PluginShutdown()
• func PluginStartup()

Functions

func PluginNfqueueHandler

func PluginNfqueueHandler(mess dispatch.NfqueueMessage, ctid uint32, newSession bool) dispatch.NfqueueResult

PluginNfqueueHandler is called to handle nfqueue packet data. We only look at TCP traffic with port 443 as destination. When detected, we load the server certificate from the cache or fetch it from the server and store it in the cache. Once we have the cert, we attach it to the session, extract the interesting subject fields, and put them in the session table.

func PluginShutdown

func PluginShutdown()

PluginShutdown function called when the daemon is shutting down.

func PluginStartup

func PluginStartup()

PluginStartup function is called to allow plugin specific initialization.