# @TEST-EXEC: bro -C -r $TRACES/tls/ocsp-stapling.trace %INPUT # @TEST-EXEC: btest-diff .stdout event ssl_stapled_ocsp(c: connection, is_orig: bool, response: string) { local chain: vector of opaque of x509 = vector(); for ( i in c$ssl$cert_chain ) chain[i] = c$ssl$cert_chain[i]$x509$handle; print is_orig, |response|; print x509_ocsp_verify(chain, response, SSL::root_certs); }