# This tests OCSP response containing a certificate

# @TEST-EXEC: bro -C -r $TRACES/tls/ocsp-response-only.pcap %INPUT
# @TEST-EXEC: btest-diff .stdout

event ocsp_response(f: fa_file, resp_ref: opaque of ocsp_resp, resp: OCSP::Response)
{
if (resp?$certs)
        {
	for (x in resp$certs)
		{
		print x509_parse(resp$certs[x]);
		}
	}
}