mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 16:18:19 +00:00
8f1cbb8b0a
Now the right signer certificate for the reply is looked up (and no longer assumed that it is the first one) and a few compares are fixed. Plus - there are more test cases that partially send certificates in the ocsp message and partially do not - and it seems to work fine in all cases. Addresses BIT-1212
10 lines
434 B
Text
10 lines
434 B
Text
# @TEST-EXEC: bro -C -r $TRACES/tls/ocsp-stapling.trace %INPUT
|
|
# @TEST-EXEC: btest-diff ssl.log
|
|
# @TEST-EXEC: bro -C -r $TRACES/tls/ocsp-stapling-twimg.trace %INPUT
|
|
# @TEST-EXEC: mv ssl.log ssl-twimg.log
|
|
# @TEST-EXEC: btest-diff ssl-twimg.log
|
|
# @TEST-EXEC: bro -C -r $TRACES/tls/ocsp-stapling-digicert.trace %INPUT
|
|
# @TEST-EXEC: mv ssl.log ssl-digicert.log
|
|
# @TEST-EXEC: btest-diff ssl-digicert.log
|
|
|
|
@load protocols/ssl/validate-ocsp
|