add parsing certificates in OCSP responses

This commit is contained in:
Liang Zhu 2015-08-18 19:35:43 -07:00
parent 12c68f197c
commit 1989f34a0a
4 changed files with 42 additions and 1 deletions

View file

@ -0,0 +1,15 @@
# This tests OCSP response containing a certificate
# @TEST-EXEC: bro -C -r $TRACES/tls/ocsp-response-only.pcap %INPUT
# @TEST-EXEC: btest-diff .stdout
event ocsp_response(f: fa_file, resp_ref: opaque of ocsp_resp, resp: OCSP::Response)
{
if (resp?$certs)
{
for (x in resp$certs)
{
print x509_parse(resp$certs[x]);
}
}
}