zeek/testing/btest/Traces/tls
Johanna Amann 6ab5701ad0 Update certificate validation script - new version will cache valid
intermediate chains that it encounters on the wire and use those to try
to validate chains that might be missing intermediate certificates.

This vastly improves the number of certificates that Bro can validate.
The only drawback is that now validation behavior is not entirely
predictable anymore - the certificate of a server can fail to validate
when Bro just started up (due to the intermediate missing), and succeed
later, when the intermediate can be found in the cache.

Has been tested on big-ish clusters and should not introduce any
performance problems.
2015-03-09 12:46:33 -07:00
..
cert-no-cn.pcap Do not log common name by default (it is most interesting for scripts) 2015-03-03 16:38:25 -08:00
chrome-34-google.trace Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
dhe.pcap Add DH support to SSL analyzer. 2014-04-26 23:52:51 -07:00
ecdhe.pcap Log chosen curve when using ec cipher suite in TLS. 2014-04-26 09:48:36 -07:00
ecdsa-cert.pcap Fix x509 analyzer to correctly return ecdsa as the key_type for ecdsa certs. 2014-11-25 11:18:07 -08:00
google-duplicate.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
heartbleed-encrypted-short.pcap Add new features from other branch to the heartbleed-detector (and clean them up). 2014-05-14 15:42:27 -07:00
heartbleed-encrypted-success.pcap Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
heartbleed-encrypted.pcap Add new features from other branch to the heartbleed-detector (and clean them up). 2014-05-14 15:42:27 -07:00
heartbleed-success.pcap Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
heartbleed.pcap Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
missing-intermediate.pcap Update certificate validation script - new version will cache valid 2015-03-09 12:46:33 -07:00
ocsp-stapling-digicert.trace Fix ocsp reply validation - there were a few things that definitely were wrong. 2014-09-04 12:22:55 -07:00
ocsp-stapling-twimg.trace Fix ocsp reply validation - there were a few things that definitely were wrong. 2014-09-04 12:22:55 -07:00
ocsp-stapling.trace Add very basic ocsp stapling support. 2014-04-24 12:37:34 -07:00
pop3-starttls.pcap add starttls support for pop3 2014-05-15 10:25:21 -07:00
smtp-starttls.pcap Add smtp starttls support 2014-05-15 09:59:43 -07:00
ssl-v2.trace test for new ssl/tls dpd signature 2014-04-10 14:33:14 -07:00
ssl.v3.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-1.2-handshake-failure.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-conn-with-extensions.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-expired-cert.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls1.2.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00