Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 19:48:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

SSL: Add new extension types and ECH test

Browse source 
This commit adds a multitude of new extension types that were added in
the last few years; it also adds grease values to extensions, curves,
and ciphersuites.

Furthermore, it adds a test that contains a encrypted-client-hello
key-exchange (which uses several extension types that we do not have in
our baseline so far).
This commit is contained in:
Johanna Amann 2023-10-30 13:55:17 +00:00
parent 552c65a881
commit ff27eb5a69
6 changed files with 186 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

53
testing/btest/Baseline/scripts.base.protocols.ssl.tls13-encrypted-client-hello/.stdout Normal file
View file

@ -0,0 +1,53 @@
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
T, grease_0xDADA
T, renegotiation_info
T, application_layer_protocol_negotiation
T, signature_algorithms
T, key_share
T, psk_key_exchange_modes
T, application_setting
T, SessionTicket TLS
T, supported_versions
Curves, 192.168.20.65, 162.159.138.85
grease_0x1A1A
x25519
secp256r1
secp384r1
T, supported_groups
T, encrypted_client_hello
T, extended_master_secret
T, status_request
T, signed_certificate_timestamp
T, ec_point_formats
T, server_name
T, compress_certificate
T, grease_0x9A9A
T, padding
F, supported_versions
F, key_share
T, grease_0xBABA
Curves, 192.168.20.65, 162.159.138.85
grease_0xDADA
x25519
secp256r1
secp384r1
T, supported_groups
T, SessionTicket TLS
T, application_setting
T, ec_point_formats
T, encrypted_client_hello
T, renegotiation_info
T, signed_certificate_timestamp
T, status_request
T, signature_algorithms
T, compress_certificate
T, psk_key_exchange_modes
T, extended_master_secret
T, server_name
T, application_layer_protocol_negotiation
T, supported_versions
T, key_share
T, grease_0xFAFA
T, padding
F, supported_versions
F, key_share

12
testing/btest/Baseline/scripts.base.protocols.ssl.tls13-encrypted-client-hello/ssl.log Normal file
View file

@ -0,0 +1,12 @@
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path ssl
#open XXXX-XX-XX-XX-XX-XX
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version cipher curve server_name resumed last_alert next_protocol established ssl_history cert_chain_fps client_cert_chain_fps sni_matches_cert
#types time string addr port addr port string string string string bool string string bool string vector[string] vector[string] bool
XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 192.168.20.65 51066 162.159.138.85 443 TLSv13 TLS_AES_128_GCM_SHA256 x25519 cloudflare-ech.com F - - T CsiI - - -
XXXXXXXXXX.XXXXXX ClEkJM2Vm5giqnMf4h 192.168.20.65 51071 162.159.138.85 443 TLSv13 TLS_AES_128_GCM_SHA256 x25519 cloudflare-ech.com F - - T CsiI - - -
#close XXXX-XX-XX-XX-XX-XX