From fc35ab9bf5b78f088a795f35c01e54ec82c01b84 Mon Sep 17 00:00:00 2001
From: Liang Zhu <liangzhu@icsi.berkeley.edu>
Date: Wed, 15 Jul 2015 01:30:46 -0700
Subject: [PATCH] add a btest for ocsp http get

---
 .../ocsp.log                                     |  10 ++++++++++
 testing/btest/Traces/tls/ocsp-http-get.pcap      | Bin 0 -> 1812 bytes
 .../base/protocols/ssl/ocsp-http-get.test        |   4 ++++
 3 files changed, 14 insertions(+)
 create mode 100644 testing/btest/Baseline/scripts.base.protocols.ssl.ocsp-http-get/ocsp.log
 create mode 100644 testing/btest/Traces/tls/ocsp-http-get.pcap
 create mode 100644 testing/btest/scripts/base/protocols/ssl/ocsp-http-get.test

diff --git a/testing/btest/Baseline/scripts.base.protocols.ssl.ocsp-http-get/ocsp.log b/testing/btest/Baseline/scripts.base.protocols.ssl.ocsp-http-get/ocsp.log
new file mode 100644
index 0000000000..8ceb5e9770
--- /dev/null
+++ b/testing/btest/Baseline/scripts.base.protocols.ssl.ocsp-http-get/ocsp.log
@@ -0,0 +1,10 @@
+#separator \x09
+#set_separator	,
+#empty_field	(empty)
+#unset_field	-
+#path	ocsp
+#open	2015-07-15-08-22-46
+#fields	ts	cid.orig_h	cid.orig_p	cid.resp_h	cid.resp_p	cuid	certId.hashAlgorithm	certId.issuerNameHash	certId.issuerKeyHash	certId.serialNumber	req.id	req.version	req.requestorName	resp_ts	resp.id	resp.responseStatus	resp.responseType	resp.version	resp.responderID	resp.producedAt	resp.certStatus	resp.thisUpdate	resp.nextUpdate	method
+#types	time	addr	port	addr	port	string	string	string	string	string	string	count	string	time	string	string	string	count	string	string	string	string	string	string
+1436909712.307162	192.168.6.109	54690	216.58.192.46	80	CXWv6p3arKYeMETxOg	sha1	F2E06AF9858A1D8D709B4919237AA9B51A287E64	4ADD06161BBCF668B576F581B6BB621ABA5A812F	3D474496FF942316	-	0	-	1436909712.329517	Ft368Gc1ce0Juvj0d	successful	Basic OCSP Response	0	4ADD06161BBCF668B576F581B6BB621ABA5A812F	20150711011056Z	good	20150711011056Z	20150718011056Z	GET
+#close	2015-07-15-08-22-46
diff --git a/testing/btest/Traces/tls/ocsp-http-get.pcap b/testing/btest/Traces/tls/ocsp-http-get.pcap
new file mode 100644
index 0000000000000000000000000000000000000000..e264d59f2b0ed64290cd7fc9c43d68c23bbb0eae
GIT binary patch
literal 1812
zcmaKs4@?tx6vyvMTeVt6M;PGTZetk!mEJ*H%OOgEwty6nwt<p3DDBVo?Dg)rUa|Z$
z&`f1Uotca+*=B%jM%=&X{4?DabTh`xxy>ojY{9uL=!|69Ow_nd-S1ZdPIPPfOMdt6
z-RHgEd*9zX|Hb}6879Xb{Nxx8A9i%V<8+qEu?o0H3tQTIbz5|+&~R#D=WNW3Vat=p
zi?AZ)@%m$Xl);Piv7FH%tVZrybR9Vl$i(<AEr!YDiUV@lY!!BQ?tEm&<Kku^vhu?R
z<Vofvf0Aq(!!U#LmnK9-bgX7{sN+IcJ)}<zEZUvDb4QHakI3cMMG4WT$TmnWhLO;E
zBxhanl~~S=Gjg7QbXRvgHtu6#j(9BJbVNqEeh-NkVM)-MNyNWQzKVz=ryfg8!p6_+
zpC)D?qSfpmw7e%IXl>@e`r7tli_L6XzuIA{DE2wUQlG8F>T{Zkiydt`tEl(8c<;LU
zl4g5tU>#@)QdY*FmRsClTJ5w;q}AdN8}ow<<!!AimPCoMih|o`H<px?Qf0Lj&1tz7
zw!~IPlsOzVS}KQ9tIGJ0L=zsC0h|<~a(q1RV?mCG52{tp5D+ycAACU*Hol!<S+`c7
zLlWur6jeZ2fR`8D1w<vog(F17XlOL(3J9^4&dbjsGYBj21bA&ONs;hR5f(-SYx#&4
zy;Q4A9uE*8RRR%7>z9ITwp$Qb#^aV4p3_E<B`Y%18e|Jv3dx-O>`ZNDY-gMTX)4{E
zFYNXKngE=}Y0m~+%t1fxVCFo$m*IRg;cI7vY{CoHvTg~eRV6&f0S^jG69E7Ojhkg!
zp<S&)eLk*GOe^ORP3lZnVw!B6p-GqAl@RTY$DLr+WS?P=w?jQ<AfjfL0&9rFVrwQb
zuF`ZB5ieUFOH9I@M^YXpPPLK9B}t-sRqQwt?3c#TCct9+yQoNC8WDs9o(sYAmBQ20
zgxxJ=6BI>MgjtB7^aN?7^#+>CC9F1wT4jz1ux%llr~_W;r~fZMI}lreNE0YV<75mk
z5Fcby2{@nRrwN@QPpzug)Z6Wv8j+W#>JG&e<h`J<ndLnJ<X{oqL7=G?P+MShyUAv*
zt}VBgS3#uP;|ChpHA&=Inh?UxP&U~_&>hjh{uk!y^ac_M3~3>c)GgDY2UY?i2M-*J
z%6rg<Mv`s`!!LzG=%7}SQT((D#|EPK3AjC`oRg)*6^dCTj?1I?K4^NM?CBp$lqXb-
zDH9ieddq*X^=8kZPnuJXHuPwd7NFXZ%P1&xiqsn#$N<TZCUTBaku^U~mZHGq2{$gU
zyR&i2l5N5p<;kh-!v|B+H+UaUlg%!)miFK8OHJ&?9w84boHiM!f~l2rGB=fNx~;}x
z%2-?!$FZ05qCea_lG>T+%O8C@J+3>LHL-$uFC%=Xul&;9+pA>WXxGT1(!X=76aU;}
z`rttNjd_OMs=4>`WR9IZKR#p4I-53pVTc*gZdv~B^UXco1K$<>wrj`zy<4ls#yd`b
zd`5G2Ueet)eLY*egJ0dNyqG);GM_ri22Mv8I@3ITV=pz0zOr)O#z1n1>)JPM;lsC^
zGFEus+P7iz>Pz`Wul@Dpf+rTI?`d@1db8=<GcR6Fv451>wBOV=$o;Nbded|E*(Lh$
z&-<P`8Go>PT-|%(>y53t`a`{)CkKZ=+jVJqRlitR`Kn{&-0Ry*%3qlH{HJqbVSeh#
z-G@7`b)Dzlu9B{_(RX^$O{;@9?SH2Jud%7W=HVHg5be0o-2$inAI&|}GkPVuzyAQq
CCRr%}

literal 0
HcmV?d00001

diff --git a/testing/btest/scripts/base/protocols/ssl/ocsp-http-get.test b/testing/btest/scripts/base/protocols/ssl/ocsp-http-get.test
new file mode 100644
index 0000000000..10ccc80c63
--- /dev/null
+++ b/testing/btest/scripts/base/protocols/ssl/ocsp-http-get.test
@@ -0,0 +1,4 @@
+# This tests a normal OCSP request sent through HTTP GET
+
+# @TEST-EXEC: bro -C -r $TRACES/tls/ocsp-http-get.pcap %INPUT
+# @TEST-EXEC: btest-diff ocsp.log