zeek/testing/btest/scripts/policy/protocols/ssl/validate-sct.bro

21 lines
718 B
Text

# @TEST-EXEC: bro -r $TRACES/tls/signed_certificate_timestamp.pcap $SCRIPTS/external-ca-list.bro %INPUT
# @TEST-EXEC: cat ssl.log > ssl-all.log
# @TEST-EXEC: bro -r $TRACES/tls/signed_certificate_timestamp-2.pcap $SCRIPTS/external-ca-list.bro %INPUT
# @TEST-EXEC: cat ssl.log >> ssl-all.log
# @TEST-EXEC: btest-diff .stdout
# @TEST-EXEC: TEST_DIFF_CANONIFIER="$SCRIPTS/diff-remove-x509-names | $SCRIPTS/diff-remove-timestamps" btest-diff ssl-all.log
@load protocols/ssl/validate-sct
module SSL;
event ssl_established(c: connection)
{
print c$ssl$ct_proofs;
for ( i in c$ssl$ct_proofs )
{
local proof = c$ssl$ct_proofs[i];
local log = SSL::ct_logs[proof$logid];
print log$description, proof$valid;
}
}