|
1
|
# Valid certificate SSL
|
|
2
|
# Pattern attributes: good slow notsofast subset
|
|
3
|
# Protocol groups: secure ietf_proposed_standard
|
|
4
|
# Wiki: http://www.protocolinfo.org/wiki/SSL
|
|
5
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
|
6
|
|
|
7
|
# This matches anything claiming to use a valid certificate from a well
|
|
8
|
# known certificate authority.
|
|
9
|
#
|
|
10
|
# This is a subset of ssl, so it needs to come first to match.
|
|
11
|
#
|
|
12
|
# Note that opening a website that has a valid certificate will
|
|
13
|
# open one connection that matches this and many ssl connections that
|
|
14
|
# only match the ssl pattern. Thus, this pattern may not be very useful.
|
|
15
|
#
|
|
16
|
# This pattern is believed match only the above, but may not match all
|
|
17
|
# of it.
|
|
18
|
#
|
|
19
|
# the certificate authority info is sent in quasi plain text, if it matches
|
|
20
|
# a well known certificate authority then we will assume it is a
|
|
21
|
# web/imaps/etc server. Other ssl may be good too, but it should fall under
|
|
22
|
# a different rule
|
|
23
|
|
|
24
|
validcertssl
|
|
25
|
^(.?.?\x16\x03.*\x16\x03|.?.?\x01\x03\x01?.*\x0b).*(thawte|equifax secure|rsa data security, inc|verisign, inc|gte cybertrust root|entrust\.net limited)
|