@@ -284,80 +284,125 @@ Types
284284
285285 :Type: :zeek:type: `record `
286286
287- version: :zeek:type: `count ` :zeek:attr: `&log `
288- Version number.
289287
290- serial: :zeek:type: `string ` :zeek:attr: `&log `
291- Serial number.
288+ .. zeek :field :: version :zeek:type:`count` :zeek:attr:`&log`
292289
293- subject: :zeek:type: `string ` :zeek:attr: `&log `
294- Subject.
290+ Version number.
295291
296- issuer: :zeek:type: `string ` :zeek:attr: `&log `
297- Issuer.
298292
299- cn: :zeek:type: `string ` :zeek:attr: `&optional `
300- Last (most specific) common name.
293+ .. zeek :field :: serial :zeek:type:`string` :zeek:attr:`&log`
301294
302- not_valid_before: :zeek:type: `time ` :zeek:attr: `&log `
303- Timestamp before when certificate is not valid.
295+ Serial number.
304296
305- not_valid_after: :zeek:type: `time ` :zeek:attr: `&log `
306- Timestamp after when certificate is not valid.
307297
308- key_alg: :zeek:type: `string ` :zeek:attr: `&log `
309- Name of the key algorithm
298+ .. zeek :field :: subject :zeek:type:`string` :zeek:attr:`&log`
310299
311- sig_alg: :zeek:type: `string ` :zeek:attr: `&log `
312- Name of the signature algorithm
300+ Subject.
313301
314- key_type: :zeek:type: `string ` :zeek:attr: `&optional ` :zeek:attr: `&log `
315- Key type, if key parseable by openssl (either rsa, dsa or ec)
316302
317- key_length: :zeek:type: `count ` :zeek:attr: `&optional ` :zeek:attr: `&log `
318- Key length in bits
303+ .. zeek :field :: issuer :zeek:type:`string` :zeek:attr:`&log`
319304
320- exponent: :zeek:type: `string ` :zeek:attr: `&optional ` :zeek:attr: `&log `
321- Exponent, if RSA-certificate
305+ Issuer.
322306
323- curve: :zeek:type: `string ` :zeek:attr: `&optional ` :zeek:attr: `&log `
324- Curve, if EC-certificate
325307
326- tbs_sig_alg: :zeek:type: `string `
327- Name of the signature algorithm given inside the tbsCertificate. Should be equivalent to `sig_alg `.
308+ .. zeek :field :: cn :zeek:type:`string` :zeek:attr:`&optional`
309+
310+ Last (most specific) common name.
311+
312+
313+ .. zeek :field :: not_valid_before :zeek:type:`time` :zeek:attr:`&log`
314+
315+ Timestamp before when certificate is not valid.
316+
317+
318+ .. zeek :field :: not_valid_after :zeek:type:`time` :zeek:attr:`&log`
319+
320+ Timestamp after when certificate is not valid.
321+
322+
323+ .. zeek :field :: key_alg :zeek:type:`string` :zeek:attr:`&log`
324+
325+ Name of the key algorithm
326+
327+
328+ .. zeek :field :: sig_alg :zeek:type:`string` :zeek:attr:`&log`
329+
330+ Name of the signature algorithm
331+
332+
333+ .. zeek :field :: key_type :zeek:type:`string` :zeek:attr:`&optional` :zeek:attr:`&log`
334+
335+ Key type, if key parseable by openssl (either rsa, dsa or ec)
336+
337+
338+ .. zeek :field :: key_length :zeek:type:`count` :zeek:attr:`&optional` :zeek:attr:`&log`
339+
340+ Key length in bits
341+
342+
343+ .. zeek :field :: exponent :zeek:type:`string` :zeek:attr:`&optional` :zeek:attr:`&log`
344+
345+ Exponent, if RSA-certificate
346+
347+
348+ .. zeek :field :: curve :zeek:type:`string` :zeek:attr:`&optional` :zeek:attr:`&log`
349+
350+ Curve, if EC-certificate
351+
352+
353+ .. zeek :field :: tbs_sig_alg :zeek:type:`string`
354+
355+ Name of the signature algorithm given inside the tbsCertificate. Should be equivalent to `sig_alg `.
356+
328357
329358
330359.. zeek :type :: X509::Extension
331360 :source-code: base/init-bare.zeek 4994 5000
332361
333362 :Type: :zeek:type: `record `
334363
335- name: :zeek:type: `string `
336- Long name of extension. oid if name not known
337364
338- short_name: :zeek:type: `string ` :zeek:attr: `&optional `
339- Short name of extension if known
365+ .. zeek :field :: name :zeek:type:`string`
366+
367+ Long name of extension. oid if name not known
368+
369+
370+ .. zeek :field :: short_name :zeek:type:`string` :zeek:attr:`&optional`
340371
341- oid: :zeek:type: `string `
342- Oid of extension
372+ Short name of extension if known
343373
344- critical: :zeek:type: `bool `
345- True if extension is critical
346374
347- value: :zeek:type: `string `
348- Extension content parsed to string for known extensions. Raw data otherwise.
375+ .. zeek :field :: oid :zeek:type:`string`
376+
377+ Oid of extension
378+
379+
380+ .. zeek :field :: critical :zeek:type:`bool`
381+
382+ True if extension is critical
383+
384+
385+ .. zeek :field :: value :zeek:type:`string`
386+
387+ Extension content parsed to string for known extensions. Raw data otherwise.
388+
349389
350390
351391.. zeek :type :: X509::BasicConstraints
352392 :source-code: base/init-bare.zeek 5002 5005
353393
354394 :Type: :zeek:type: `record `
355395
356- ca: :zeek:type: `bool ` :zeek:attr: `&log `
357- CA flag set?
358396
359- path_len: :zeek:type: `count ` :zeek:attr: `&optional ` :zeek:attr: `&log `
360- Maximum path length
397+ .. zeek :field :: ca :zeek:type:`bool` :zeek:attr:`&log`
398+
399+ CA flag set?
400+
401+
402+ .. zeek :field :: path_len :zeek:type:`count` :zeek:attr:`&optional` :zeek:attr:`&log`
403+
404+ Maximum path length
405+
361406 :Attributes: :zeek:attr: `&log `
362407
363408
@@ -366,35 +411,53 @@ Types
366411
367412 :Type: :zeek:type: `record `
368413
369- dns: :zeek:type: `string_vec ` :zeek:attr: `&optional ` :zeek:attr: `&log `
370- List of DNS entries in SAN
371414
372- uri: :zeek:type: `string_vec ` :zeek:attr: `&optional ` :zeek:attr: `&log `
373- List of URI entries in SAN
415+ .. zeek :field :: dns :zeek:type:`string_vec` :zeek:attr:`&optional` :zeek:attr:`&log`
416+
417+ List of DNS entries in SAN
418+
419+
420+ .. zeek :field :: uri :zeek:type:`string_vec` :zeek:attr:`&optional` :zeek:attr:`&log`
374421
375- email: :zeek:type: `string_vec ` :zeek:attr: `&optional ` :zeek:attr: `&log `
376- List of email entries in SAN
422+ List of URI entries in SAN
377423
378- ip: :zeek:type: `addr_vec ` :zeek:attr: `&optional ` :zeek:attr: `&log `
379- List of IP entries in SAN
380424
381- other_fields: :zeek:type: `bool `
382- True if the certificate contained other, not recognized or parsed name fields
425+ .. zeek :field :: email :zeek:type:`string_vec` :zeek:attr:`&optional` :zeek:attr:`&log`
426+
427+ List of email entries in SAN
428+
429+
430+ .. zeek :field :: ip :zeek:type:`addr_vec` :zeek:attr:`&optional` :zeek:attr:`&log`
431+
432+ List of IP entries in SAN
433+
434+
435+ .. zeek :field :: other_fields :zeek:type:`bool`
436+
437+ True if the certificate contained other, not recognized or parsed name fields
438+
383439
384440
385441.. zeek :type :: X509::Result
386442 :source-code: base/init-bare.zeek 5016 5023
387443
388444 :Type: :zeek:type: `record `
389445
390- result: :zeek:type: `int `
391- OpenSSL result code
392446
393- result_string: :zeek:type: `string `
394- Result as string
447+ .. zeek :field :: result :zeek:type:`int`
448+
449+ OpenSSL result code
450+
451+
452+ .. zeek :field :: result_string :zeek:type:`string`
453+
454+ Result as string
455+
456+
457+ .. zeek :field :: chain_certs :zeek:type:`vector` of :zeek:type:`opaque` of x509 :zeek:attr:`&optional`
458+
459+ References to the final certificate chain, if verification successful. End-host certificate is first.
395460
396- chain_certs: :zeek:type: `vector ` of :zeek:type: `opaque ` of x509 :zeek:attr: `&optional `
397- References to the final certificate chain, if verification successful. End-host certificate is first.
398461
399462 Result of an X509 certificate chain verification
400463
0 commit comments