zeek/testing/btest/scripts/base/protocols/ssl
Johanna Amann 95f1565498 Match DPD TLS signature on one-sided connections.
This commit changes DPD matching for TLS connections. A one-sided match
is enough to enable DPD now.

This commit also removes DPD for SSLv2 connections. SSLv2 connections do
basically no longer happen in the wild. SSLv2 is also really finnicky to
identify correctly - there is very little data required to match it, and
basically all matches today will be false positives. If DPD for SSLv2 is
still desired, the optional signature in policy/protocols/ssl/dpd-v2.sig
can be loaded.

Fixes GH-1952
2022-02-01 16:51:21 +00:00
..
basic.test Change SSL and X.509 logging format 2021-06-29 09:26:43 +01:00
common_name.test General btest cleanup 2020-08-11 11:26:22 -07:00
comp_methods.test General btest cleanup 2020-08-11 11:26:22 -07:00
cve-2015-3194.test General btest cleanup 2020-08-11 11:26:22 -07:00
dhe.test General btest cleanup 2020-08-11 11:26:22 -07:00
dpd.test Match DPD TLS signature on one-sided connections. 2022-02-01 16:51:21 +00:00
dtls-no-dtls.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dtls-stun-dpd.test Baseline updates for recent SSL changes. 2021-06-29 15:03:03 +01:00
dtls.test General btest cleanup 2020-08-11 11:26:22 -07:00
ecdhe.test General btest cleanup 2020-08-11 11:26:22 -07:00
ecdsa.test General btest cleanup 2020-08-11 11:26:22 -07:00
fragment.test Baseline updates for recent SSL changes. 2021-06-29 15:03:03 +01:00
handshake-events.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
keyexchange.test General btest cleanup 2020-08-11 11:26:22 -07:00
ocsp-http-get.test Enable OCSP logging by default. 2021-06-29 09:26:29 +01:00
ocsp-request-only.test Enable OCSP logging by default. 2021-06-29 09:26:29 +01:00
ocsp-request-response.test Enable OCSP logging by default. 2021-06-29 09:26:29 +01:00
ocsp-response-only.test Enable OCSP logging by default. 2021-06-29 09:26:29 +01:00
ocsp-revoked.test Enable OCSP logging by default. 2021-06-29 09:26:29 +01:00
ocsp-stapling.test General btest cleanup 2020-08-11 11:26:22 -07:00
signed_certificate_timestamp.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
tls-1.2-ciphers.test General btest cleanup 2020-08-11 11:26:22 -07:00
tls-1.2-handshake-failure.test General btest cleanup 2020-08-11 11:26:22 -07:00
tls-1.2-random.test General btest cleanup 2020-08-11 11:26:22 -07:00
tls-1.2.test General btest cleanup 2020-08-11 11:26:22 -07:00
tls-extension-events.test General btest cleanup 2020-08-11 11:26:22 -07:00
tls1_1.test General btest cleanup 2020-08-11 11:26:22 -07:00
tls13-experiment.test General btest cleanup 2020-08-11 11:26:22 -07:00
tls13-version.test General btest cleanup 2020-08-11 11:26:22 -07:00
tls13.test Fix TLS 1.3 session resumption detection. 2020-12-15 16:34:47 +00:00
tls13_encrypted_handshake_events.test Add one more TLS 1.3 testcase and update NEWS 2020-12-15 16:57:26 +00:00
x509-invalid-extension.test General btest cleanup 2020-08-11 11:26:22 -07:00
x509_extensions.test OpenSSL 3: fix warnings and tests 2021-11-17 13:33:49 +00:00