zeek/testing/btest/scripts/base/protocols/ssl
Johanna Amann 94f55532f2 Make parsing of ServerKeyExchange work for D(TLS) < 1.2.
Now we only parse the SignatureAndHashalgorithm field in cases where it
is present. This change also takes care to respect SCTs, which do
include the SignatureAndHashalgorithm in their digitally-signed struct,
even when used in protocol versions that do not have the
SignatureAndHashalgorithm in the protocols digitally-signed struct.

I also added tests to make sure this does indeed work with TLS 1.1 - it
turns out that so far we did not have a single TLS 1.1 pcap.
2017-11-30 12:20:45 -08:00
..
basic.test Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
common_name.test Do not log common name by default (it is most interesting for scripts) 2015-03-03 16:38:25 -08:00
cve-2015-3194.test Add testcase for CVE-2015-3194 2016-01-19 14:45:52 -08:00
dhe.test Add DH support to SSL analyzer. 2014-04-26 23:52:51 -07:00
dpd.test SSL: update dpd signature for TLS1.3 2017-04-05 08:58:08 -07:00
dtls-stun-dpd.test DTLS: Fix interaction with STUN 2016-05-17 16:36:46 -07:00
dtls.test Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
ecdhe.test Log chosen curve when using ec cipher suite in TLS. 2014-04-26 09:48:36 -07:00
ecdsa.test Fix x509 analyzer to correctly return ecdsa as the key_type for ecdsa certs. 2014-11-25 11:18:07 -08:00
fragment.test Implement correct parsing of TLS record fragmentation. 2015-03-11 18:23:08 -07:00
handshake-events.test Add two more ssl events - one triggered for each handshake message and one 2014-06-06 12:50:54 -07:00
keyexchange.test Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
ocsp-http-get.test OCSP: re-enable logging, fix tests, fix x509 issue 2017-02-10 17:05:12 -08:00
ocsp-request-only.test OCSP: re-enable logging, fix tests, fix x509 issue 2017-02-10 17:05:12 -08:00
ocsp-request-response.test OCSP: re-enable logging, fix tests, fix x509 issue 2017-02-10 17:05:12 -08:00
ocsp-response-only.test OCSP: re-enable logging, fix tests, fix x509 issue 2017-02-10 17:05:12 -08:00
ocsp-revoked.test OCSP: re-enable logging, fix tests, fix x509 issue 2017-02-10 17:05:12 -08:00
ocsp-stapling.test Revert "add parameter 'status_type' to event ssl_stapled_ocsp" 2017-07-27 15:12:19 -07:00
signed_certificate_timestamp.test Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
tls-1.2-ciphers.test Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-1.2-handshake-failure.test Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-1.2-random.test Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-1.2.test Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-extension-events.test Add support for two TLS 1.3 extensions. 2017-04-05 11:55:40 -07:00
tls1_1.test Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
tls13-experiment.test Add TLS 1.3 fix and testcase. 2017-09-09 22:25:49 -07:00
tls13.test TLS 1.3 support. 2016-10-07 12:51:43 -07:00
x509_extensions.test Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00