ldap: add test for STARTTLS extended operation

diff --git a/tests/ldap-starttls/input.pcap b/tests/ldap-starttls/input.pcap
new file mode 100644 (file)
index 0000000..681bf12
Binary files /dev/null and b/tests/ldap-starttls/input.pcap differ

diff --git a/tests/ldap-starttls/test.yaml b/tests/ldap-starttls/test.yaml
new file mode 100644 (file)
index 0000000..56e0ab5
--- /dev/null
+++ b/tests/ldap-starttls/test.yaml
@@ -0,0 +1,27 @@
+requires:
+  min-version: 8
+
+args:
+- -k none
+
+pcap: input.pcap
+
+checks:
+- filter:
+    count: 1
+    match:
+      event_type: ldap
+      ldap.request.message_id: 1
+      ldap.request.operation: extended_request
+      ldap.request.extended_request.name: "1.3.6.1.4.1.1466.20037"
+- filter:
+    count: 1
+    match:
+      event_type: tls
+      tls.from_proto: ldap
+      tls.issuerdn: CN=LDAP SSL test
+      tls.notafter: '2025-01-28T02:18:29'
+      tls.notbefore: '2015-01-31T02:18:29'
+      tls.serial: 00:8A:07:E0:8D:4A:B5:0A:7B
+      tls.subject: CN=LDAP SSL test
+      tls.version: TLS 1.2