Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 00:28:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add one more TLS 1.3 testcase and update NEWS

Browse source
This commit is contained in:
Johanna Amann 2020-12-15 16:57:26 +00:00 • committed by Johanna Amann
parent 3c95c9a956
commit 22ed75c3ce
5 changed files with 74 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

22
testing/btest/scripts/base/protocols/ssl/tls13_encrypted_handshake_events.test Normal file
View file

@ -0,0 +1,22 @@
# @TEST-EXEC: zeek -b -C -r $TRACES/tls/tls13_wolfssl.pcap %INPUT
# @TEST-EXEC: btest-diff ssl.log
# @TEST-EXEC: btest-diff .stdout
@load base/protocols/ssl
redef SSL::disable_analyzer_after_detection=F;
event ssl_encrypted_data(c: connection, is_orig: bool, record_version: count, content_type: count, length: count)
{
print "encrypted", c$id, is_orig, SSL::version_strings[record_version], content_type;
}
event ssl_established(c: connection)
{
print "Established!";
}
event ssl_probable_encrypted_handshake_message(c: connection, is_orig: bool, length: count)
{
print "Probable handshake", is_orig, length;
}