mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
f39efd0317
The way in which TLS 1.3 is negotiated was changed slightly in later revisions of the standard. The final version is only sent in an extension - while the version field in the server hello still shows TLS 1.2. This patch makes ssl.log show the correct version again.
4 lines
205 B
Text
4 lines
205 B
Text
# @TEST-EXEC: bro -C -r $TRACES/tls/tls13draft23-chrome67.0.3368.0-canary.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff ssl.log
|
|
|
|
# Test that we correctly parse the version out of the extension in an 1.3 connection
|