inliniac/suricata — pull request #1099 by chifflier (2014-08-09 07:49:34+00:00)
Title: Tls 1.4

This pull request replaces #917 to add support for the new TLS handshake keywords.

It also fixes a but (commit 7471dd6) where the TLS parser state was not fully reset. Problem happened when parsing two TLS records in the same TCP packet, but only when code was actually parsed (so it was not noticed before). This is the behavior of most TLS implementations.
This fixes the specific bug, however it's difficult to be sure that every other case is correctly handled (two TLS handshake in one TLS record, for ex).