Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-17 05:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Spicy TLS: SSLv2 client hello support.

Browse source 
This lets us parse traces that use the old SSLv2 client hello format,
while actually negotiating SSLv3 and above.
This commit is contained in:
Johanna Amann 2024-08-20 16:05:36 +01:00
parent 71d2e8d961
commit 2aae73ea75
3 changed files with 110 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

3
testing/btest/scripts/policy/frameworks/intel/seen/certs.zeek
View file

@ -1,6 +1,3 @@
# Does not work in spicy version, due to missing SSLv2 handshake support
# @TEST-REQUIRES: ! grep -q "#define ENABLE_SPICY_SSL" $BUILD/zeek-config.h
# @TEST-EXEC: zeek -b -Cr $TRACES/tls/ecdsa-cert.pcap %INPUT
# @TEST-EXEC: cat intel.log > intel-all.log
# @TEST-EXEC: zeek -b -r $TRACES/tls/ssl.v3.trace %INPUT