From: Philippe Antoine <contact@catenacyber.fr>
Date: Fri, 18 Sep 2020 06:15:44 +0000 (+0200)
Subject: Adds http2 test against Suricata bug fixes
X-Git-Tag: suricata-6.0.4~227
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f87e26d06004621174150eb61c4f15adcc7939e8;p=thirdparty%2Fsuricata-verify.git

Adds http2 test against Suricata bug fixes
---

diff --git a/tests/http2-bugfixes/README.md b/tests/http2-bugfixes/README.md
new file mode 100644
index 000000000..70744c7dc
--- /dev/null
+++ b/tests/http2-bugfixes/README.md
@@ -0,0 +1,7 @@
+# Description
+
+Test http2 bug fixes
+
+# PCAP
+
+The pcap comes from some SSL decrypt application
diff --git a/tests/http2-bugfixes/input.pcap b/tests/http2-bugfixes/input.pcap
new file mode 100644
index 000000000..40e77a543
Binary files /dev/null and b/tests/http2-bugfixes/input.pcap differ
diff --git a/tests/http2-bugfixes/suricata.yaml b/tests/http2-bugfixes/suricata.yaml
new file mode 100644
index 000000000..0b72e6cab
--- /dev/null
+++ b/tests/http2-bugfixes/suricata.yaml
@@ -0,0 +1,15 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: true
+      types:
+        - alert
+        - http2
+        - anomaly
+
+app-layer:
+  protocols:
+    http2:
+      enabled: true
diff --git a/tests/http2-bugfixes/test.yaml b/tests/http2-bugfixes/test.yaml
new file mode 100644
index 000000000..8db25b020
--- /dev/null
+++ b/tests/http2-bugfixes/test.yaml
@@ -0,0 +1,16 @@
+requires:
+  features:
+    - HAVE_LIBJANSSON
+  min-version: 6.0.0
+
+# disables checksum verification
+args:
+  - -k none
+
+checks:
+
+  # Check that there is no anomaly in HTTP2 parsing
+  - filter:
+      count: 0
+      match:
+        event_type: anomaly