mirror of
https://github.com/zeek/zeek.git
synced 2025-10-09 10:08:20 +00:00
add parsing certificates in OCSP responses
This commit is contained in:
parent
12c68f197c
commit
1989f34a0a
4 changed files with 42 additions and 1 deletions
|
@ -0,0 +1,15 @@
|
|||
# This tests OCSP response containing a certificate
|
||||
|
||||
# @TEST-EXEC: bro -C -r $TRACES/tls/ocsp-response-only.pcap %INPUT
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
event ocsp_response(f: fa_file, resp_ref: opaque of ocsp_resp, resp: OCSP::Response)
|
||||
{
|
||||
if (resp?$certs)
|
||||
{
|
||||
for (x in resp$certs)
|
||||
{
|
||||
print x509_parse(resp$certs[x]);
|
||||
}
|
||||
}
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue