update baselines & add ocsp leak check

This commit is contained in:
Bernhard Amann 2014-05-16 11:23:44 -07:00
parent d9e7ac6e92
commit 5db240f291

View file

@ -0,0 +1,19 @@
# Needs perftools support.
#
# @TEST-GROUP: leaks
#
# @TEST-REQUIRES: bro --help 2>&1 | grep -q mem-leaks
#
# @TEST-EXEC: HEAP_CHECK_DUMP_DIRECTORY=. HEAPCHECK=local btest-bg-run bro bro -b -m -r $TRACES/tls/ocsp-stapling.trace %INPUT
# @TEST-EXEC: btest-bg-wait 30
@load base/protocols/ssl
event ssl_stapled_ocsp(c: connection, is_orig: bool, response: string)
{
local chain: vector of opaque of x509 = vector();
for ( i in c$ssl$cert_chain )
chain[i] = c$ssl$cert_chain[i]$x509$handle;
print x509_ocsp_verify(chain, response, SSL::root_certs);
}