zeek/testing/btest/Traces/tls
Johanna Amann f39efd0317 Recognize TLS 1.3 negotiation correctly.
The way in which TLS 1.3 is negotiated was changed slightly in later
revisions of the standard. The final version is only sent in an
extension - while the version field in the server hello still shows TLS
1.2.

This patch makes ssl.log show the correct version again.
2018-03-27 14:58:06 -07:00
..
cert-no-cn.pcap Do not log common name by default (it is most interesting for scripts) 2015-03-03 16:38:25 -08:00
certificate-with-sct.pcap Add parsing of signed certificate timestamps out of X.509 certs. 2017-02-07 13:31:21 -08:00
chrome-34-google.trace Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
chrome-63.0.3211.0-canary-tls_experiment.pcap Add TLS 1.3 fix and testcase. 2017-09-09 22:25:49 -07:00
CVE-2015-3194.pcap Add testcase for CVE-2015-3194 2016-01-19 14:45:52 -08:00
dhe.pcap Add DH support to SSL analyzer. 2014-04-26 23:52:51 -07:00
dtls1_0.pcap Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
dtls1_2.pcap Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
ecdhe.pcap Log chosen curve when using ec cipher suite in TLS. 2014-04-26 09:48:36 -07:00
ecdsa-cert.pcap Fix x509 analyzer to correctly return ecdsa as the key_type for ecdsa certs. 2014-11-25 11:18:07 -08:00
google-duplicate.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
heartbleed-encrypted-short.pcap Add new features from other branch to the heartbleed-detector (and clean them up). 2014-05-14 15:42:27 -07:00
heartbleed-encrypted-success.pcap Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
heartbleed-encrypted.pcap Add new features from other branch to the heartbleed-detector (and clean them up). 2014-05-14 15:42:27 -07:00
heartbleed-success.pcap Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
heartbleed.pcap Add documentation, consts and tests for the new events. 2014-04-24 12:05:30 -07:00
imap-starttls.pcap Basic IMAP StartTLS analyzer. 2015-07-22 10:35:49 -07:00
irc-starttls.pcap StartTLS support for IRC 2015-07-29 11:47:59 -07:00
missing-intermediate.pcap Update certificate validation script - new version will cache valid 2015-03-09 12:46:33 -07:00
ocsp-http-get.pcap add a btest for ocsp http get 2015-07-15 01:30:46 -07:00
ocsp-request-only.pcap add btest and fix bug 2015-06-19 09:37:10 -07:00
ocsp-request-response.pcap add btest and fix bug 2015-06-19 09:37:10 -07:00
ocsp-response-only.pcap add btest and fix bug 2015-06-19 09:37:10 -07:00
ocsp-revoked.pcap parse revocation time and reason in ocsp response 2015-07-31 13:39:25 -07:00
ocsp-stapling-digicert.trace Fix ocsp reply validation - there were a few things that definitely were wrong. 2014-09-04 12:22:55 -07:00
ocsp-stapling-twimg.trace Fix ocsp reply validation - there were a few things that definitely were wrong. 2014-09-04 12:22:55 -07:00
ocsp-stapling.trace Add very basic ocsp stapling support. 2014-04-24 12:37:34 -07:00
pop3-starttls.pcap add starttls support for pop3 2014-05-15 10:25:21 -07:00
signed_certificate_timestamp-2.pcap SCT: Add signed certificate timestamp validation script. 2017-03-29 09:17:30 -07:00
signed_certificate_timestamp.pcap Add support for the signed_certificate_timestamp TLS extension. 2017-02-03 11:23:49 -08:00
signed_certificate_timestamp_tls1_0.pcap Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
smtp-starttls.pcap Add smtp starttls support 2014-05-15 09:59:43 -07:00
ssl-v2.trace test for new ssl/tls dpd signature 2014-04-10 14:33:14 -07:00
ssl.v3.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
telesec.pcap Fix parsing of x509 pre-y2k dates 2016-04-26 12:30:28 -07:00
tls-1.2-handshake-failure.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-13draft19-early-data.pcap SSL: update dpd signature for TLS1.3 2017-04-05 08:58:08 -07:00
tls-conn-with-extensions.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-early-alert.trace Add missing pcap file for tls dpd test. 2015-10-23 15:04:26 -07:00
tls-expired-cert.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls-fragmented-handshake.pcap.gz Implement correct parsing of TLS record fragmentation. 2015-03-11 18:23:08 -07:00
tls1.2.trace Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
tls1_1.pcap Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
tls13draft16-chrome55.0.2879.0-canary-aborted.pcap TLS 1.3 support. 2016-10-07 12:51:43 -07:00
tls13draft16-chrome55.0.2879.0-canary.pcap TLS 1.3 support. 2016-10-07 12:51:43 -07:00
tls13draft16-ff52.a01-aborted.pcap TLS 1.3 support. 2016-10-07 12:51:43 -07:00
tls13draft16-ff52.a01.pcap TLS 1.3 support. 2016-10-07 12:51:43 -07:00
tls13draft23-chrome67.0.3368.0-canary.pcap Recognize TLS 1.3 negotiation correctly. 2018-03-27 14:58:06 -07:00
webrtc-stun.pcap DTLS: Fix interaction with STUN 2016-05-17 16:36:46 -07:00
x509-generalizedtime.pcap Fixed parsing of V_ASN1_GENERALIZEDTIME timestamps in x509 certificates 2015-09-10 10:50:35 +02:00
xmpp-dialback-starttls.pcap Add xmpp dpd sig and fix a few parsing problems for connections that do 2015-07-21 13:20:35 -07:00
xmpp-starttls.pcap Add simple XMPP StartTLS analyzer. 2015-07-21 12:18:14 -07:00