From 34225e83ba56ad111add4d67356c105900a21cce Mon Sep 17 00:00:00 2001 From: Johanna Amann Date: Thu, 23 May 2024 14:26:24 +0100 Subject: [PATCH] Update TLS consts, mainly new named curves. Add test for X25519Kyber768Draft00 (post-quantum key agreement) --- scripts/base/protocols/ssl/consts.zeek | 20 +++++++++++++++--- .../scripts.base.protocols.ssl.tls13/.stdout | 14 ++++++++++++ .../ssl-out.log | 10 +++++++++ .../tls/chrome-1250-tls-x25519-kyber.pcap | Bin 0 -> 11949 bytes .../scripts/base/protocols/ssl/tls13.test | 3 +++ 5 files changed, 44 insertions(+), 3 deletions(-) create mode 100644 testing/btest/Traces/tls/chrome-1250-tls-x25519-kyber.pcap diff --git a/scripts/base/protocols/ssl/consts.zeek b/scripts/base/protocols/ssl/consts.zeek index cc953df3ab..9c1854285b 100644 --- a/scripts/base/protocols/ssl/consts.zeek +++ b/scripts/base/protocols/ssl/consts.zeek @@ -136,7 +136,9 @@ export { [113] = "bad_certificate_status_response", [114] = "bad_certificate_hash_value", [115] = "unknown_psk_identity", + [116] = "certificate_required", # RFC8446 [120] = "no_application_protocol", + [121] = "ech_required", # draft-ietf-tls-esni-17 } &default=function(i: count):string { return fmt("unknown-%d", i); }; # Map SSL Extension values to consts for easier readability of code. @@ -338,15 +340,27 @@ export { [26] = "brainpoolP256r1", # 26-28 are TLS 1.3 obsoleted [27] = "brainpoolP384r1", [28] = "brainpoolP512r1", - # Temporary till 2017-01-09 - draft-ietf-tls-rfc4492bis - [29] = "x25519", # TLS 1.3 valid - [30] = "x448", # TLS 1.3 valid + [29] = "x25519", # RFC8446, RFC8422, TLS 1.3 valid + [30] = "x448", # RFC8446, RFC8422, TLS 1.3 valid + [31] = "brainpoolP256r1tls13", # RFC8734 + [32] = "brainpoolP384r1tls13", # RFC8734 + [33] = "brainpoolP512r1tls13", # RFC8734 + [34] = "GC256A", # RFC9189 + [35] = "GC256B", # RFC9189 + [36] = "GC256C", # RFC9189 + [37] = "GC256D", # RFC9189 + [38] = "GC512A", # RFC9189 + [39] = "GC512B", # RFC9189 + [40] = "GC512C", # RFC9189 + [41] = "curveSM2", # RFC8998 # draft-ietf-tls-negotiated-ff-dhe-10 [256] = "ffdhe2048", # 256-260 are TLS 1.3 valid [257] = "ffdhe3072", [258] = "ffdhe4096", [259] = "ffdhe6144", [260] = "ffdhe8192", + [25497] = "X25519Kyber768Draft00", # draft-tls-westerbaan-xyber768d00-02 + [25498] = "SecP256r1Kyber768Draft00", # draft-kwiatkowski-tls-ecdhe-kyber-01 [0xFF01] = "arbitrary_explicit_prime_curves", [0xFF02] = "arbitrary_explicit_char2_curves", # GREASE values - rfc8701 diff --git a/testing/btest/Baseline/scripts.base.protocols.ssl.tls13/.stdout b/testing/btest/Baseline/scripts.base.protocols.ssl.tls13/.stdout index d1de37cbdc..94c5dd788b 100644 --- a/testing/btest/Baseline/scripts.base.protocols.ssl.tls13/.stdout +++ b/testing/btest/Baseline/scripts.base.protocols.ssl.tls13/.stdout @@ -125,3 +125,17 @@ established, [orig_h=10.192.48.168, orig_p=63564/tcp, resp_h=64.233.185.139, res encrypted, [orig_h=10.192.48.168, orig_p=63564/tcp, resp_h=64.233.185.139, resp_p=443/tcp], T, TLSv12, 23 encrypted, [orig_h=10.192.48.168, orig_p=63564/tcp, resp_h=64.233.185.139, resp_p=443/tcp], F, TLSv12, 23 encrypted, [orig_h=10.192.48.168, orig_p=63564/tcp, resp_h=64.233.185.139, resp_p=443/tcp], T, TLSv12, 23 +chrome-1250-tls-x25519-kyber.pcap +key_share, [orig_h=0.0.51.217, orig_p=13783/tcp, resp_h=142.250.200.14, resp_p=443/tcp], T +grease_0xCACA +X25519Kyber768Draft00 +x25519 +client, TLSv10, TLSv12 +key_share, [orig_h=0.0.51.217, orig_p=13783/tcp, resp_h=142.250.200.14, resp_p=443/tcp], F +X25519Kyber768Draft00 +server, TLSv12, TLSv12 +encrypted, [orig_h=0.0.51.217, orig_p=13783/tcp, resp_h=142.250.200.14, resp_p=443/tcp], F, TLSv12, 23 +established, [orig_h=0.0.51.217, orig_p=13783/tcp, resp_h=142.250.200.14, resp_p=443/tcp] +encrypted, [orig_h=0.0.51.217, orig_p=13783/tcp, resp_h=142.250.200.14, resp_p=443/tcp], T, TLSv12, 23 +encrypted, [orig_h=0.0.51.217, orig_p=13783/tcp, resp_h=142.250.200.14, resp_p=443/tcp], F, TLSv12, 23 +encrypted, [orig_h=0.0.51.217, orig_p=13783/tcp, resp_h=142.250.200.14, resp_p=443/tcp], F, TLSv12, 23 diff --git a/testing/btest/Baseline/scripts.base.protocols.ssl.tls13/ssl-out.log b/testing/btest/Baseline/scripts.base.protocols.ssl.tls13/ssl-out.log index 8ec1f6448a..a31d066e05 100644 --- a/testing/btest/Baseline/scripts.base.protocols.ssl.tls13/ssl-out.log +++ b/testing/btest/Baseline/scripts.base.protocols.ssl.tls13/ssl-out.log @@ -63,3 +63,13 @@ XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 192.168.178.80 54220 174.138.9.219 443 TLSv1 #types time string addr port addr port string string string string bool string string bool string vector[string] vector[string] bool XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 10.192.48.168 63564 64.233.185.139 443 TLSv13 TLS_AES_256_GCM_SHA384 secp256r1 - F - - T CjiICs - - - #close XXXX-XX-XX-XX-XX-XX +#separator \x09 +#set_separator , +#empty_field (empty) +#unset_field - +#path ssl +#open XXXX-XX-XX-XX-XX-XX +#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version cipher curve server_name resumed last_alert next_protocol established ssl_history cert_chain_fps client_cert_chain_fps sni_matches_cert +#types time string addr port addr port string string string string bool string string bool string vector[string] vector[string] bool +XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 0.0.51.217 13783 142.250.200.14 443 TLSv13 TLS_AES_128_GCM_SHA256 X25519Kyber768Draft00 lh3.google.com F - - T CsiI - - - +#close XXXX-XX-XX-XX-XX-XX diff --git a/testing/btest/Traces/tls/chrome-1250-tls-x25519-kyber.pcap b/testing/btest/Traces/tls/chrome-1250-tls-x25519-kyber.pcap new file mode 100644 index 0000000000000000000000000000000000000000..91cb3e33bd4be5edc35b4c1b808aab73c9908fd6 GIT binary patch literal 11949 zcmbVy1yG#bwq--pSb*RT!QI{6-8DdPcXzko?gR_&?(Xg$g1c*i4*BnU^Zt9M=G~dM zt9E~-H00iK_0vrJL{w88t#^f3b62SJp{*!+XXn-gHKmh;< z00bbb&H(`CmFUM|1lA?6w*UN;0{Gk8pY{Jc${&P3NMLQOOaFlarhxqai}EjL`BMm( z0^)z6gsMOSkf8v7<$vt**W*t`P!Oz3e=2h1{_jxGfnbnJU;xNDAW+T4JN>X&*e@ZK z5yBij8s<=icTe$5>1keo_gKv*w})Ve+U>hh%KhP?^~rhmAbQ1qFb>=i+^U$yoK@#+ zWYrmf;P@B?3O$W3djUx0q6m&?;BZISiB#R_&wnP$N)qL zAT$I77zhXr0)at8LV^K40KnhNgayC>U`Iy{(*Sq?3;-qo2LJ>IfQy&|K<^7PCIBjvmzD) zbm~kED7y+lA5ZFV%mIbY_Vn&*uku$-| zrk4Q6SB&|}VAQT;Vw9RyWD%{nPg?ABlJ3;w2J_{5g0Zkwn{~zkoXxsFgG!!Lj`-)b|7 z6yV=vZ0Op7bNX&g4aOvhf>G#1uYc7psPij;a3h?KpWReaaYgUk;` zy18*3-Od;=y{p>f39p}OGbR0LcB?{+EknzcUGKqQ_WoN7Gedp?abXimZZbhh4QJ1_ zgUT+nQ)Z4^yNG6pVX>#Q@+@3tY?4tO3eMJqplQvkC$m~3B|r<+bY#E|k*K%5C}J45 zCs$7>fwD4>`0O}LWE;@rpZ1}fY*UlnBM97RMI98M<2z&)jy`ab){34H(a9+xa!+tl z7HLOF2wf|agNzI7;k_8@8+#uk=b5CVK zjWQyj+r&Ac2r<^GPu>N5Bja1;=B`8xc|7QoBFD-_FRS^Q7!sVJlQ6K*=9~&DkC&m+ z4ze;2fePP>kn=;J-LEgm{12ZQc5|V5N4>g_384t&wuxFUU z)b=*Z>-fO96rK)Cs46t?bhaO|Ioyur&`Fgt`6yYHK&Dlgub!pk^>sUEyW!JK3U<(X z>xm#sy%Rkzstg2C*3c1|?!eTK%@2w^mbm_mR`$h)!RAt=u=r`c4N0;L>CyDA4B$>h zznt6h?i}U1^}-MN1QM8WYtb2?ByM=bwTAgwx4T^(V(5?PxDaxBw6V2mrWu?t?aSaQD0Yo4zJOr^8C`XbxEh z!9i`{ZILWXhMu2|2HBB<+#Ka{lq@){htc2l<4>RfkN^M#D>G&~Q(Ie8D`PrCTWcw) z_p1M>^&f@&zia+K6w(9ZU)1{j8-)Dvcbx@}LISc80e|IRd;Z7EADu;v{RfJ9)qjVA z4g^B9zBeX~KwyTWXHXs*DyrZCM3U&!G-qo*OW@-jv$<6d{ru7_V8Cv8&rC|bJ8Bl9C2GAL#Kqb(Y z-mVl~=_^$D+N_n83=&S4x?MEKh7$H$c@ZBy**jPo`EIKW)Y^2W&$ziKd19YbKOxzzn=U1SHKtePIeclKgb=~? zLc`xB1}wmeg)MfKHetZxZs;Q;W}X%nxa%wXJ_kA#zGQ=C0@9|bolgjDR+~;&UD{+W zl4)6E$BnOZZXb3DTjMy;gB=z951D2brM7oaXtvPge5gGqJqn+6L*~Lj`+UyWTnAmm z@qV6b=NndH0V`R%ZOC6&nkKwMa7%kRG$SS*K2jzCGQ4WCU}fn6!#4?7IqM>e>6Lgj zJByFGkpoDl0&8R1XypfL>@$dNsZ~iPrp|Agp>H(GvKXXbc)2RfR4mVoxYj5!dTt+! z7oE!Oopw3C>Z^Q`x9`rwXB|oa)|wuWg?wF$=KIlbk>-Z(wyVyh%5T0l2|mOeUp^qk z6_yM*$w8LCwNN7`Qo-pqUf8)fIK(ze@+8b$ff6wu$-1RwUaYeUV)I_&dhR3_Un{Xb zhQ6lHnOw=tIm5qO#MNMC)28@t5zF>AwQjXE;TCVlp&Mt1VZAW+or%nx8)5n>N|9mX zx3}qnrnPvMc@pUwz^)z8<(0WtCruw~+PIk?xh)6oBsO@iJo7c|!Qc|Wy^blANGbiy z&#f29Nrg-lzA4G!UPYA6kOIo$27h04|Qv`Pp73?O2^4ZOZ~ zk?O=A54`=9#8lBbof9*H(Y)cpIng}xYGklc(W0V?Wo`Xw_(kjUPw5^D$X;P}TwD~R z2;_&7Y2YZXy(}xlZ_=*tM`K^TL5xEwO+9tl#TvVusCBMH69%o*EOFrsS-z}x^lEQnncR2f*O1+29@aa4_~$1HQ5AS0mqhl{JmQ#_ zEL2d1!NzD5D(V-D5EnNGCU$0h;Iz4}H&v1;d+Ai2S+PlgFjON_zEG&ioo1}`gI8~^ew36}`CS>DW@A0*<&==T zV#@cUp4`1|AL znD>+huEL=P=kW2R@QsiQe{VGrusmd$vU6cg#mkZ4cE8rW2co&fkKs&N?dJ8c=3=tuG=gp4hBH5}6O8IC3Ov zXK2Z>R@J!AwwBv2*19wHU1mnhQd+H2YwSCFZQS*FZ#Q-l8XXoaPLLK7!{!KP$iZN9 z%P@uRIOAmbyj5UHU$lU#ejY(F!<}AamER0L^y#Qz8-DqOa0^*UxFG^#%N_S+7!uyl zuY&W*2p3z1Frz|D0r%L_6^n45Jd7L9a$Bi#Zq`yzp}If+ye)F}uvse77-5xgv(H)| z6#r9r)=Y!D?JCmFLl`NiJL<T}=Z%gftu_zCHinub#egA2 z_v%{1DRA}8x3^|5Rzj?xIx)V88*bQ7ZiOz&J{;!GrT03rN#6tMcim_)+TcbTe%Zb9 zp|FmSJM@fKD$%EyNteEQjiD+F{O~4kndy+T$c7HUKZ z=h8MKxXPLb4z@4>Lmp9;0{v(C{05tgleZ6J%_5yj&}Lxvisd(xcdosiMbX)4PDww$ z7%>(96z!$L;`83$XG({yp7kY)QOo2EN(s*$UNCo}E%_Whr|E4_F%Y)BuHG@eI@e!R z!GK;H(3>Q9{_S!HBN`@ZcNBgIW_fgY86cP?_9CpDYaZvszJl9AQ|%v1xfvnz(^xSx zd0NS?`z8Bfz(ADcSZl5$WL+YGH%Ahek3@+ckpn%A;ItN4S;Kp&7c6Q()7s^sFjV8S zuZFQz_Ou@QC?SyZ>jU)99a)j~aBJEgA(e?;PPa><3%Wat^HWJ}GyPpl|@ zG~aU4c>tS02%J(1^k=2{%NdGC+*`5bLz?P5f|W8#ocIUq9&D@OrS~L0&l5!NCH1e+-fNHWNTPDMQ(F>Nsx=f z>{K?cLRaebr=sZ4Z{*4-&%L9xwdu@T!ami8E5{|dChfH)0&HQ>xES=rc9>BfYE#;6 zhwWuVI_UitnVxF>3lhDte#@DLyK{w?ULcntIQ!#8q4O2V@<<{7&G~th>-v12DTTmuflio$sUT#*!{ekqga7hata2FKpp3Ae7O&&8v$lm%MM zqo38Y3U^Zz+zu_GmhU@15FtU^`m<)MbKF4-_? z+?WT{>?gkx*vclXQ)w@ccEBqm3;&(1x|F{^Vj<;2;>+UOu)R}~kd90`6 zUSSUJNL7OH!*g6SB$Qu{rx!vtXxS+aL#7Ntm$VU-$hEQ&^1;sSr-oHH6C~(xb{0;c zEyO&*3wppFgEhZsoE++B`=N07#bN=xR_%*etC98=X zag#bT>PUzVv&|gn8@Tuv@Ckd+QJ0upK~}g-u@**0UOC76KG4tHS2bBT$38SpKU zJM>O6v`S%@ng#FEqzyXe#gQrLzyPrnY8}Zpc)ga3fl>Fjqyxb)WZx|Js$z_Lz(4TNLt*xhG-K$J#(Q;R4k2H&?TxR@ZJFGRFm;!J@jRY73PcyF;(% z;EICUJNqiz3iIQ%Cw`r8Vz+{?kJs)(@m*4la@S(yG?1mjzJ4c5Z9~P*>=QC28Lr@> z82nCbJc(13Ryr3Ke4G=m;|WX<_(CBzvMz9Xy2M-aBfmp`eL*-378`RWCT+Blh3BKT zX-C;3uHm=IU3PHvixU$%^`+$XeL56%U{C#-=nn(uEm$+i_^ODueniNC^;DGN-tZw5 zVJAkx!J;%M12AtN**B01IR6-4|5sVPrK;W5ob)l~0L_J+~4Cb2z(M*7Lcoo+EURgfiB z+K%K!qn_Xe4ecg}&R6seR$xHNJ%{HDXI?V2kq!HT1fwWdJt@+50uUQmh{CF6a^ba- zJjpeL)?zHDt(0WQ(c@TtY@Artvn7NvkGS={K5lv!Y-Kki3yfV*I;6n~6iZD-8tvfa z?xZ#VS3%_u=_3-VsE&7L&Z|gFNG-NDIuR;+^%;m)i9}b{( z{xmolZ&lE)N&ZxIWWCQ=<#UJPd7{o;El@_|7V}I#zcpsYAsQXPh9)n@XqotR^G7Gpu8Z+xgH#iv*<4h8mEo86@YabV1z zv15^E{#_5WJP}E8O2M6GKoI%&;%79c)Vmy_c`-M4vjF~ql#W6$N>MQ(4h*=XtMhd5 zZuw4SLu-rVab3wN{VJyND--!?;wPvtum1!Qb+iKi|| z1Cr|FRk=%!UpIu||2&iuwH z$?fDC{9Dtj1v5D1v_)U%aI*U0$F_~GI(=k(Rv#mb{1kL47m(9xMq$G@y4G);#|+J# z#btHCCvyWZ#e{T$#D3d9p2r`z;@^87|2!3d`~d(Un*ZJN@Onof`vCYW|JC#OfcX#4 z!wM8QOK_6el==T|*6a*=K116L+K{WZiMgfaybNm%>20l9g|B17kHzgIh$k@Y&~ zRH5pE-DtuLz8b)jj0FXt{Fu9qM9>=}M!uSzq7bj*n`+>*@|{)`ozk@o!A}X`>;u*D zJ&U4KJVPc6m#OYJtsbDybj;rG$hupS7Q6)0eXiM2wl>%=Bs*Y)AWWef8QI|lubYaV z zd2I^Al5Le$I$pP)94g+vL?omXz{@Fuh59>@1a?@1YKX#cTfYVyNF)*X#itR^3(qOD zBR3~5br-BMUA1}tu*!;Dpo1;rpq$@0;G-dGR^B^c^`?X$d{a)q`a> zCF4YAp;k~Mqm^VUK#Q_(W!?jmZ(eGa;zwUD@+RwS!|aExg!6=^1ISc6`l`v|*^t29 ztQ1R=8+^8aYNJgXsoL9siJVO{X>igxFvR$|C;0h!>x38P$0w;<2X}^Utz=w)e)-dH ze7}X`3E0;?)582&oEK_^YyekjeFF(hk1}6eQVT}FcI49YqZ1|Jm(DSeb$-Ot)q|!Y z(ntB)d#vtk_8$M?X{$-2-NDbO`HwrZWlf1U5sh=X#%G5Zn&{{CJcbWW&R-j9Z*}$% zZhSYpDZ=QFKC>-Sd4CtIQ+$k?#qF20?OUlFMJB=J`W4n`Eu!^`)R;-C&gTe*Vd?s6 z*zj&8lw-*SBRR!7K6vsvc(jT{ZqX#|RcyXI$4qM(^NM@2?wom&@Y$wyBWF!==c7wN zibUKfej!Fo_Gpmnt>eL*2iwmA$tK>#&el2+ERGSXXx$ZjLXTTqQFh(xrt9uUa?}~< z!pgv+OlF3!7X@~3+SS_B|1LUr2uT(M#tu${|jN*SxxwniMYRk#RG-dZG@d z>dEJgcAPZw0xe@~atKN2RbL?Une?j5&!6fhnMWWaZxC|yBfGe8~- zz2#zFIZ4|= z*oyRCuF0qaPqkmNAJ%Xe@Fxo}zB>V-YJa3vb*XPk+hnJO7j}O?*tI47y~9*yX~%eR z)`sQSyB+DrM84t_ZJ9yPq`4+|mFSAmu$lXK=`Y!o?nB0yS|AEO7pc>NOtl72GeM7s zIya3U8fk>+P}|*5z1p?3afd8V9hinIn`KbBYbguVr!(`()Wx;vux{-+RX%qMxnER; z&bbX>Ua0{^H$ATfDfHw*yWN27005iz%kx|xoH4l3Z@U|M=N>J?up{^Sg-kB6ksn=K z(^G_19upNgmpU^*wf2%ful9A@DmM5Oh0Lp&BI{pFmg(T3U+MIV=VxTU*XcmoJKN0j znx*gI!Ea~_!G1-uIC(Xy&=RhbQtVS~98Y>NO-_h14S~})uAev#6VTc-Uu^978jR$B z;LUWV&8k62fvY7$D0NxewX-ea3z7s5`94D}M_13a`JNQ+Cer(^+X)wJW7&NCt|yB zFf3i*tHY`I!gM>e-sUL>|N9w3t6yCKVKoKcv*`r(&~`+T34KEr7sRsdrCE{kIm}i_*KW3%5v)nVRf~N~8@0VXMJoxV zn35zGgj`!~UJpP<5}#i+X%1|q@2+YM$bG<2IX>ND>~#5TB6=UFqy zeKuk$6!Nl|3TS-6_9J#f`>YgQYR&gW$2*L#T6N^I!07irZgMXI112Fs(k8T%r&63cOlC+G~iv+I_PFUM7v z5*qE~`tm(|^v6AW+!(Y28bOn%FU49WiJK%)@Wq}JHWzv@P2MsL%rX7!D$&&+%AFT# zCf1o3A(sVx;@hwTxPEade!R6o-F|i+Q>~rb7*Sol^TT z!SAF)-q8LHRsDS2c@Lv-y?t57UExZZ!M_N`P!f}-(@Pi&4B?N$+>-f@C> ztCmHDD+iV^GioFZsjqHqIZUbtN2qOUCRZ_2@iVbDl_O6$>}Hfnl>?npclr;_8Db5> zVO%L;83I^M>FU|59}eZ<>xw8^QF6YnAaI{ey`1=Sfu$d-KfuYd)zu&s*}p{j`XDWG zHjavLV44x^#u@+6+MmwUyB2fHSGBjbj_Gg>E=Wv6r@Hk_;EM7j1w$ z7I(T4&r#D`{)ded4AIbeM!&A-BHBYqhzaz%tI__XSs+UVVvO$)fce<};u!>Th;mL@Qz|j3iS3O67%RkHkpDqON4*654|O z2&-cezN5Q|j<83G{jrgoye{`*HoMI9Haq5%yVL#Pz86t2yQWlVE}D`0m7+`*s~YxkMz<&@m#sE% zZGsrm&1`G8u=!8#{ikdGpY+~1nt$)TL1T~r=l4rYfAa6~XWj^5`j6h*dHJ7vZye3P z_uk_qC8uPzv8Ab1zxlK^CHk-_ELq#UDp{Z#q6c`j>*wbZ1Ej^LNU|u@vI~e0E^RL* z<@cy?xkjwkx)QRxu_ZGeEnYGW z#?6o-+wJ(Ep*QI-z=|-1fN-jKw9xs+TAM)!KKB;owv|=lJv7ULTExVeH%<$=$^pE{ z#myr3vVHZ5y&X6(TwnTeD2m{XD*a%vR^>#9OuCDj9?a8V|UPAkC2&&tSL7Iq2oMAS4FCB#Bk(g@LAGBfj$x8e{54r8!xhJ&`dh@Q`Gwq>9U)1F{0z7cfPfOg3Wri!yiIuL3%Q zH^O|8WsOUw>gC|Wy$0&XLCKwjTAt|pYnfW2gUczN@`eXmfRHYJxHOeuj#AzvDKsX{ zS>JK%%0z_Y;3(qtBpxZy8GQZ^CQz);kH>;S{2P8c%w}0*Sca5C)VSuUpM`UN1_^J*5g0$fHms`}j zaweN7A&*0qQS6zMl;JjM9@WP1h(N!#(;g{G)84B-7iCKWH^*PlTXOj*(?79gR4RS@ z6}r;#&vS5V_|a%2JA@rLZm8%aO&k=?PC-6X_EoGxh@rl92g%HLO+cu9v zd_oql<`-(FNy0}#yT(mk@3elDlT5S7y3Hx@)4^!}Nbn?+TQ{mgjoaBeWzVJ+?_S`E zoAlF@j4#4;8>HXyne>I|qyg-qAqJ(LA|qZ(|Rb$NNPRV1Lab9UmtPF1`gOjV9I=k9j@1Mzhk1$ra5@ z60vXO6bMSKbJUr83>-}s^ug;R*w27&iu=_upbC;y54a!Uc{>_s7sWAOQ6qQZ&25MK&7z&Y4%DB+>I8BbqJHDRO zF50K0cbQB|J($N8$y+q>Sv*JRjOO-zyYdVb$x-$z`NE)FMNB${4J=r%1vP8z@D5vV zBKV!1nKjw;-6(&o!H_E(M_l}IH19Mea5Kd%SJQ|v;s6)^0+@5o4eSHAq9=jJHZIBP z7yhPWQB41|hYug0x6IDmEPTooE>tq(dFlzJt0W|IC; z*&h=6pHSJS)W1_%$~%hRJBR(rzsFyfE*<_sW$qLIry22IDF1u*2;kQ{hcOBkomTJ= z+OF2`GHQs_+ZPf{E+dmH%25aQ`1wxoG}(DDSgWpeH3D(|Ku# zea(kDwM0J_q3EkP#0*s#2`BlH?gFebQj*%&+Vm=(^lKv;$HaS0$MGGimPl*J%RpVj zYbOppRatC(iMISw1+tpFgsFvqbq>RtJbmJ_y=tv55=`t&r1H51745KfI+^Rim=356 zh}U%v zWFO!vh7STQG3?AO<%Xw!ih?@*^s1w#fi?=0*8tI*_6d3f^7?(c1ouxIaq)n_~KVck=QXjcBW9)RJBwcLz&oGkmC)YK6X20HMHY+cZAmi+L zTh|$Wb57&(j@Y(`XVg|%Xj)1(oCnrRdv)=(55$_A$(BBaLY>acj6h~;d@ncd%j!Qx zL<7c=F2Zenr2Q6`4oTSJvKd1fKPHjFVgP1})TKndp64ZNfX9<%i>ZK#PLpkpxy`UD zT!d0)0ag%4kUSJQuIjW`&n8@3gLiV&2UisvM@2YwsINllBqA8*|kBEmdK;Q!6911SLfHv zuL&Y5ah?=)Nsp~eb9Zw=9Pj&izVzyzM<@bX=1q_eP z2lG#n%t{C&tdeM^fE;YASNx5g=P6{MsRGVYbJ14#dwV0LosXT7?=WLXyKhoRQEGL! z3B=V*HehzuEm1mo2gaX_8DLy4Cn^G^un8&Bbuo(>dn(mveO-=0?E-^`ObXtm4i3dw z41ub$YlL=+2Xj8qn72qH8cc8* z;0*h~r+yeu4xpwG*0wS%!wYCR{S_jgYj?8VtOVz@j`!q{+kDAp;ydx!oPCYbtBX72 zYvbInHwnxz%Ey&=|4jTl{F2*r%XG zu*&=X{{wJF=?;anuX!kPL#mrd#lsHeWY*bf+i7ux67+dT3stF1X#X;UbIhWx`BiWU mOOE&e^JOEAgvXBv;}4Vk;edb7B>&88P~`7-pVj`8N&Xkb-H-zS literal 0 HcmV?d00001 diff --git a/testing/btest/scripts/base/protocols/ssl/tls13.test b/testing/btest/scripts/base/protocols/ssl/tls13.test index d7424f7a65..f9eaaab2b7 100644 --- a/testing/btest/scripts/base/protocols/ssl/tls13.test +++ b/testing/btest/scripts/base/protocols/ssl/tls13.test @@ -16,6 +16,9 @@ # @TEST-EXEC: echo "hrr.pcap" # @TEST-EXEC: zeek -b -C -r $TRACES/tls/hrr.pcap %INPUT # @TEST-EXEC: cat ssl.log >> ssl-out.log +# @TEST-EXEC: echo "chrome-1250-tls-x25519-kyber.pcap" +# @TEST-EXEC: zeek -b -C -r $TRACES/tls/chrome-1250-tls-x25519-kyber.pcap %INPUT +# @TEST-EXEC: cat ssl.log >> ssl-out.log # @TEST-EXEC: btest-diff ssl-out.log # @TEST-EXEC: btest-diff .stdout