From 675eb897f020d0916eaaef390f5d808f576e27b5 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 18 Aug 2022 11:29:14 +0200 Subject: [PATCH] tests: add test with sslv2 start --- tests/sslv2-tls-upgrade-01/ssl-v2-s1.pcap | Bin 0 -> 20485 bytes tests/sslv2-tls-upgrade-01/test.rules | 1 + tests/sslv2-tls-upgrade-01/test.yaml | 19 +++++++++++++++++++ 3 files changed, 20 insertions(+) create mode 100644 tests/sslv2-tls-upgrade-01/ssl-v2-s1.pcap create mode 100644 tests/sslv2-tls-upgrade-01/test.rules create mode 100644 tests/sslv2-tls-upgrade-01/test.yaml diff --git a/tests/sslv2-tls-upgrade-01/ssl-v2-s1.pcap b/tests/sslv2-tls-upgrade-01/ssl-v2-s1.pcap new file mode 100644 index 0000000000000000000000000000000000000000..0fb24e5d1eb74dd6f5fc1a7fb9d746cf84391de8 GIT binary patch literal 20485 zc-owrb97|g*6u5|ZQHhO+qT`YZM$RJ>^SMzPA8poY<8U6-RFDnJ@5I>c>lOH#vZlz zt~Gu&=bCFj&#IX$4mK7513&?Py*@qw0H9y*xa~MX=cV8P{$J<(e?HL%09gPKixag@ zApv3l0Hd^&ARqvowH`XnI1xG*6b9S}s0&nZO8NI#N8pbSx*h-k7!=G82nZDTHx0b} z-)Mh00I<*!imQLo002P%KX~8MZ_;lfP#3t5%>D_>FQSSgGWzUJ%pY3wUo`(;G~Qnz z-v1UGrL^>)*xLRhHkDsQRz<{*4^pDP^8L-S7lr`j|2ohAZ>&UVxj!tK|H{Jr_^|K> z00Jz4K!5=9zY_xj1b_enAOL;f06}0t04N{;0N?@uH~|1Q0DuJmUj0{|cZ063G#kl7N2(+~4vn(vMn;cvggWfOt; zf2sfHL{eUY{GQ0UxBr+()?XoaDUu8F>eR}!LML`AOFb$L%Ib0&6+~_ zuPjXTS)lK~a`=_FG%x@l4gw^E)7lawI)Y9um90a=!JJjsi+Z_Yh~`> zY;R@6gv^Ne`z8bml!}|Zy_dU@tr-(0Bl_=q&?pEB_GT((CT`AVw1iUjCiG0GjL5$~ zfkA;0ce6FOvbD7{vv*~pWF-H67X*dC+Re_<%$eTBozBJ8$im9rg5JU2%;gV(-o(M~ z&&a=GgaSgxGXH-R!M}}U#K(YRWMO1s=3-=I<6vdg{&mUu>yqPtE*S&+|38x>V?BkI30h5IuBR<2&ZMj6>LkunnhD_0yB zD+^O&`d=Zt{<=?ZZ|3Uq2lgk=-=qF5Pc$P}H)ne@XTiUXVhqgx_mTmD0YCy{f0Zo~ zI4}?}X7gx+@eyypB8$PQRIQtPcU3kyHc%4jYHkwPCysggmH%5?#pL`^k5gx^7J|MWkPy{T-&|1m$PZk!7T@UF7dDV= zn>Z9aje*IsoPoVo$_ay$k-A;pf-RE4S;Mp@0{>dIK>x9#Kz_v)@kA=ZFk!$tEWLf~ z#tq9EYxUi3(LswBQ@|ZnV+?ZW;I<#CJuZt*=8`AhpKR}7_8|uVKRo3+T^&$zpxlx3 zX1-+oTpg)iT`54yf~vMfE+VC#J=wLq=oVcL>$>9kmPj719rEB^?6is{x^Dy-x8W$T zHiK7!&N$orDS=7**YXF7g#`db0s;=wa`~im_Go>s0|t8*z2Xwv0)v#g!1SpJO%tTO z${e533biJdNJ>jDp@tYGmkJru33v&Svn2uW_FLe%-C+D2cwX`<6x&AlUA;Kf*}8_J zGr)ZAJNhTtHJLalrM&6#dDp>tEgQ&6>_5rr)yu=tIJZ|xMido8cM0H@#%usUzvL@k zfZE=!4i4bOHN4vAE-!Ok>I&aC_dTq8SPy}qKHho77AE$|FJ6kBBK1grzs6$xf(%-L5t4gbh%uWml7-9jdTc%dY^s_4Wl)gI5ioc;~NVfX0@!mv! zsOCAP#gdxsTWn%RWhUxzS6@n*>A6nQtQYbl^@Qv`KOxSW)yWEyYiG{9sc|3PWX)pz z`ovV*voII$x*k=UA`uc^4ZF+Dr3#h^GecjOK5RBLtL-Sf8PP(5V3x5)K_09Z^;_RS z;r~Z2nL45V$#vBJI7Rh;I7PS2{w1Cw;tM)S`(Lg@^owr~G9LB!^91xeAV%I9 zD|9em7yYZLV*8vOMVbl`+r?x>?ehdE)7B`t^hic%L|F)z>n&MVT-5fh8h|JR=5-vTJ8^~x9A>Y!xTMnXJu=9{NG zp_9#yL#}+Hibdx77Cx3-{h3XEsSAd}nR|n^G9Tl208)KmfYV?5p5MoR76WKY+UR#N zm{0#+jOn0XL1-#sK5uCMGH;AuPi{TJQ|!%8bA7rMO+A|tAMVjq0(Ew1)yaMu#4gzn zAH^A8eL`=_0i7dx$4HTb@Vt142&;z|1vQdw7B9w9CMTV$n8aL$Ge2RpFjyNONc z@(-M}Mu+r!-jt8c@x-#bffQSmFdaRo$K~p|MRW2}q%vnmnvJ+xLY?`!_vuM#O%y`Z zU6m#X?;rgQ=oCWnt73iwOH;T7=ap%-CadjXn}s}5GM^Xb^v9e;i@k;f*)bs7-rxGM z^aP&`z}i}GWHz>$tG*pMLV2*T318iLA*pTO*VT8nKYD`_JAIq)q9x}*I8IANA+}b< z$6me!y(^#|9#4$N!NJ;a6-@|X?Rzr(cBcKa5}x=FzHqP}@k{g^Lfy3QKGzWLrd|1T z{)R={xEXAWTv9>JDzw@3R!QU6s2gC>=VXeD6HN^GLX4J{$`Fkjn|^}eqKtv0u9M34 ztuY{RF68E~g3CD5$+16_e{Kble?!zPM=ZV-h2SiuKtXp8QdKtI+;F%Pfc>BlpEf$M za`H1y>#*-M>h{Q{GhgDDnE>kegr^VI$jnsa-NU*KK4zl|pn{0I_+9!L1Mq*^PJ#bf zd(Z!|_B25SXE_uR@f6?30D$-Z`%EvvKmfddEur7Xf3kq=E+KxiW}E*j3lmQfDfnN@ zNRT`|nr^5#(mTi7ZiGEs4+otfURZvgG}9lH4!a|9w+KGnPJFoP#rel4gF?>jezhrO zJEnNO$v`a%2hiJYH%mko1UeupRtV5#{FxTW+@T;q;KuS$)%PMV42`UFF{|D)irc#* zM@z=!dL#s4!XV)?o2PMBGaxK4w`~2)TYacUp*cEw6MYLqD+*o{St1lBs^R1AQXxvS zqTqZomFp~SNb(~#Lj^m$&4<+ql`OJruE1}y$WV{@*sT&!DFc(meKbp@VO^3+wh0~H zk4Bzmb7lvk&GW-7Vb$jGN3Qa)Q#|>1ecwleG`5vnurue&Yllui9$e|O_bH&ag@V{O zjYqv3jIY?lNeJ|R;D`^D2sjl<_#k0MX$?s|X{hD+nd$-rxXA}kcaJQj1Dgd z!eQh}FzrSi67UG{=!T66W zDNEM>?gr>@#aajYF;srGp8%tGYU}wd`>i*_w~{L`$h8Fq1QU?iccVJ<*%zwlBEn1m zlEp*ct*oe9khlYXd7pf7vS{G5b82-E)-H+RyG>SEAzA>sRiW<0HqB%@5}M_K1;_>E zM0<|uerXM*pPMhL@4TxDpGLPAU%x0PY^W_z0g6k@GCQ}&4Q|0RchgTtACE7NI8M3K zl0`v^v8_tp@0{f5RFM>U`nG3luPa0KaiQIy zSgOO!?K4`U^WapsD3kaKy9GrTeRhVyi}OKT!Kxhc6}8tzKll#Shdt09ra7zS_OV%c zl@y1rj5J+UQT7X|Bc z2CYI^8W)2MwtMW~u>L`Y4+6q0r_>upZkJKh#;yid3k|!& ze3h1R9&+3Y6Rh=yf)Ge8Nu$y@dDS_)&&d@SF&fGNBimkOZjE1i+JLMUwrUM5!z90C z0_UayUVyOT}xoxXg{?-_|_ovShNgL46w^Wx;DDqnVQ52AOW)nerTcmO4I zRE?*7;(${A>P9SEam$rmazx#L3j+UfPd3W@Y}&LL_@?3~ZKnitf=E=@I8#I}p1!ly zoD`(v`N_P;FJyCcT;kH3{BV}woO?20`zI3f91}i7a(!Rf`bxhr+gEPT!tXp$b)qZ@k<43eK!AOa+n- zYpCxNPmTx}95L9|I33Fggq6~JmrEK~&_BmB2C&f;*!yf8hwD;qI(kQ63mdm26c`YN z!`tt7etCY`#5juSNe%3a;V8qs?-dtstV|l`jI{$kgo0?|>XtZ{h*p)f$-9e^CN9}Y zz$)WS>R3j3qJI{Ug1fC$?HbrO}lK(d^se$|I*%tW40fZA81(B))*V1j|Mx`xQN z;g%nF&}(F1&v7dOWA=&m3oYse&(whU;P{jPC3@v7LnAPL;@&QZWKT1{{vMscIg&o`i zm5R53`FVH}grIu;lE}pZhxmibml6WL-Th%VTCf`8dTcuC6#s{#M3qa!2-JxtFhi2T zAbkm`E!l%S+!4!e(SC2=pm)uqY@iPFoEsPu5XlW?BBABq8qS08j~WjBN5eh;uHg@Y ze`z=g6#&qtBF7Dl`O)ff%lH0l5a9P|L|^eqOpO1mr%QJmmdzd%&Q%}>@<62b1B`tv z*2#8>L8($8`gBZS^AUz4)X@Rd)-(0hq3uK7{~a|BQu5jUa@OodU!z=e?Wsn1P$rrp6#f&gbXw=J%<9@15-3ZSqrq>GwCAf)*`(xuuA^Y z&bNuD>ep1xVOe1QT=vZ^rG(Zv$xd1-LT!%){brMVjXvaa0PJJ13wq-j2LzY{-oCtn zm&LS}rs!?{%!`%b}&8Ece4S_S&#km9}FwK$_*MVbWc~E8#szPu&-C|a8a9s8&`L2%eQM%*#N0ov`%VRfzEdoCO+bjWh; z(%lKq4WX2GVBOL_hbeI4Lm&&8t8&1MHrzQQ*Y*RXo@=4pg@ml`qlsnFM)4Itp+dVDe439}%7Gflgm`q%rL2W$=mqfHdR>nU#`~+qG6O@|K ze$-PmQ8py;UGo7Bo80>XWPFnNjHI2mQs4Z$Crhd@1Eb0PO~`#LRa2625+1$GDcC8=mYora#`@3*frF)AB8SRCs>Q;$7$bCrI#a} zGHGkCI7LD%d-qk6ue0?x1Dyo9(8WRXh$PI~iJTs? zj&CtNSmfd-!kpJ>U-PvY*mv_-9oW(gy`8AcPt1mrWm#}E=9d6ZaF*$;SEByimnweg zE-N@S>iz(_sISu737_1i1_G+f8Vg zj`IVi+x^!`5&&n2mL?xksyyA0GByx?#8pR7K5h_*=No1HRxY!UIME;xUy|JZ|b$`7&^sG^?oFY@#>hpCd)B#gTL?k@*6^Bt)^M0V8t(CT4S(tVOT+1j004EPIA&`FyO#RND5|}qrSUCX zC>0}=U->k}{)CzL9Eq}*#v{bAydB(iS4Zy7ov<9)qU z2&fMpWR%b}hfs~u%p(BfGQ7(zpYe^-%)0pHSZx;ssNcUajNR(aq1f#@O=3 zH%T$PII^mLVqJ;u+$(rKiQpsOf(WCa}LiUzZV8}W?e>iWieEg;sF- zB!O|G%z4bQfI-Fkm^HjaZ#(F)6<(VKAlQD&aO1M4#YmHVl51Fw6VnE|U^f{IoRKC( z6Mvh_YyUBq&weVQxHJgz`o`3L{;NkneElv3;k5D4pycaihA-2PD+1P9d_8ga3kGn? z_tQ7@L}1SKG_jQ6Z#a2-3|t+Zg~)do1B7IO&K=!#B;;v}9+DHGQA0g{gd%J}@|rg) zm4$QXH4l|EOg*0*-qXqAZby_Pn-`xBf38=I%;N~XXuob;Z#?^2@(uyZHk0W)fci|4 zSdDDxbZ;oP=G5L@k6g~y9@9FNNL<1P|2oWLvLYqXqrAjRWDTRki<#(l_|uFESLu}= zW*i2g9uQ}&7T)2x7>!6-Ak%ystYus(L-S^MrH>YnDcw(D_{OIyqjWq+_w)WPsBO8i zHncnrFB?`JQIfD`dZ*b&tO(h8)&o6#rFeJ2!LK@KE#BR>;38~%N(Y&y$6qNHYwuDm z5fFq)-~F>yrE+Jc>{0Q4W<1NE;*+K9J~UZWv4fq8U!OGaT)ZID*V7B0mq(bTBRh~} z@$AZ|l(34LwNXptif4&MvCiuKQw#ZL`E9zyI$mnYceaG~f}wEg=VAqux5xU5lJZ;s z(@(*^7PDg3pXXKl9xFe4v%uaW1I2&KDsN*D?v9ZZ)|=g>Ze0P^D7f7ny;poG3@s`+FSt+T#Xg8gj$hlj8R-7a}ngF7kqMmi!=xh3eE` zZ7rN-4kZMJ-X;SyMeKA)1j=ysLoZ;kMij}$zn`B%N=#}X*HcAR6Hi5%ZGroU!^?q55F?*?2%NymzHNmqFPcV10Jo2kmo)=!ln- zI*L2KYhaFdMgQFL)FK^Hm66$!WvCUK?e)r-_390z;=b|(lB9;xw6*`9(s1uQ@>XX$ zWtPVC6~^d$`KvI8Z_aZr{-p$^u5QbKzAh?XNkat^@+8rt8bZO+G3bwr9|lI(%^hP% zve^nR+KSwQA9SXdzP@~0MBn20TQf&XUYF<(NmewBNXEW)=?(wZa1+#j?8}(^>C5E( z@4n1S@9(}0LeszZW$ON!W%`Ge`@dKRK)keE$)BwmS3E|yk%(` z02taF_SQS|OG9d4{o=ooG$uxG2&0x;?-g}DREs8C_kA^V8c*hgGVU1QlV-wE%YW|? z_q4N`4~#Fgq@e{iITnUYkjxqlP9xwHZzsJNTA>idyGC4&G^Tj-)aJb#25Q0Z*VSg0r zHjpA-1fOcwNH_^fLRNNpYpys_7LZj5r3uH}+tD1-f-qLm&x5y$8>2b9dGr1ABIBfs z0i8ly2@|B0#Fmq_H7PyXH4Htu?$(=;o=asJPjcYeaM4vj^JO7*?*-8;P$!JOn%@mj zUea9N$GCI`VTqdAOGL(@X>Og!zN5F~p6PNa>1+fJR@G(qBv`waCGrO?F3a;gnZ+M)A#6=ZetD9 z)}l0oj71&9qM&%ujtRte0%Kt21!~sECX_OswH ziPlL%4nY(UW9b5JnTO65=}yB5rtjP+H55mI=H9(Pwa}0*0|dcW=1|Z@oAs( zOELLEe;c_nDSSzrfNEaU zitW5oah-v(8+(eJRghUjD`s*UGHkM~LZxza_iIjX3aTQ~%q%Zc)X>gjb(qpcu%w6P zV`)l%I?DKN`m+30I3e8f6aE_`qkUDNpzR$59Pn=nEPc1a^KK;4=qM5P#Qp%+vp%pL z8e|IinR2KhcOxh1*4YO)2uGr>Iu+#hWiA zNA*=;6RCW=5qu7>@`c_CAqEdu&FdR%n%UJ?F+4t72C?msYOE!AaSF+JnMOg5p;k&$ zWQZ*6AZ?4>Q7zk}y)b7+IF(~;S5#soGV@y%&S7o7c?E4>qN0Q%fMbuUdr=I~4y@+Q z&`;5%g*mojxy4Ks;Lai{zRP!))I#@ogx4}gaU$C2x?u5c z&C@z~(od4 zQRJQk27Tk_4;h5~Wt1fbj1cZ;G!v|9ou5H)pv`-0*+(ysV0GtipZpjfOs#AQ6RPZ; z!TTtuu(mj=qRdC}S>526zWJ~`m4rS}DeNFsrY*mDu13Vvr%pB57{|(En~lI8@3lUD zGO?^I)b5&FR@F+`M5!BER2evX;_)5+9xFttfd%`?aJWYccFcY!?HbiIDw}n9Qu1OT zy)ob|WxZ2EOO%b`vOedI%H7&!$s0BaE4)^jGfQidn)36c-NBh*eW9k~bU_Wx z)I4R` zbd8D+k@KHFFZBMihQs~QaJRo}IC$q@8V>&z0EmeM2ljAih(Z><9c{WuC3&JfOktMy z)pYuDh{e?XnCz#Qsn?kIlLA)u$HriI;pyEemYQK;Dx!GXaa#tq7M0|~u;cCq^Ui5= zTS)@^q~E;vQNSlh3E5jSmZ;;x8s6pgbf5D9Me$bZb_U+S^L_Q3h`HAE2irCW$ZWSf ziT#H|0^iW^!QG>#ZCgj?{Eu)Sx5IQtze}B?PO7kQw2kKyDR9L!5~cK; zZf=OY=79EOE!&4m^tMFSWt(*;<9v#VYk~&4N^%R?iKBRh)Rmr*TU^(5vc@a982#Ac2EoIzW}FGSBm^9k40GQILxjaVdg6 zXz$amutDT=H*AHp=2=Bg4;p!Hh{e7tjO8ZjGF3&Q;;!y9>4-KR_zZB&?fNQkY>CEZ zssgcx!3{PTU&;6HgASx_y8CsQ-aClH-gd59=Qd07rR#=DR;e& zAW4KCA?SHn;(z5sS$}MCK(m{V*vR0>T>Dg~huSPxsT-D&9N4|YL+)HM^)-^<=!nAy zdPD)=-t1?W``t0HSUz_Zso{<#_L?B^oj#N=!b)F$I9bc~jyhgtt2a-zv#>!rwmmbO zyMsitb4xP~$sCrg#d#Jym7PSJb)?0}{bkPlcrKjDoO3G7(E7*Jo&89KU$hQ_pnSx8 zk4`f7?PW>0ZEw1>4VOJ_^AIw{Q)ugJ>j7|Nl=B{x`x{+x4{=$uK+yZP--B|l3#4r= zP6UwV$0&HVa0roqi{x+y%pSX^+hW{l`G+wQqIbD#*#UN9;6fHRjE)i7W`OQZs{*f8 z(a4veBkd|H8WBZ4xQ|-<^gxDps=A6gX0}jhbJY;t-DR1vo6^tM8)J4Dm2w`N>k3uH z9=aFpW<+2gM`~1BGj{d(z&OX9Vy~nhmKk^>@Vqi#0t_SOm|-500`;srAQ8_#R4LU$ zaHl?VFSZEfL9-kobRdWm4L`d~H>6K%9mUrs7nfacE~vbfPHc8gZQ1{5ZfHXa7^SzU zba-xAaq#R2Qh`VQ)B#TMSt;Yi^%cLlP@{*l;bN|@A?CG8su+PcT;r^59}G}HdeTl9 z9)X+)wVqC{)iH>8;66p%D++YXWHG(8 zoAAR{tcUoDMhHdq6G>AeA&ImbEYpgj!aT4@@3{3O@ofM|b=c?&qo;aR{c~bEpXsPH zB8Sm9M5<_%S&69noNQHn5hXNs=vUoQUemjJKjgb>F^b}%(N4e7-WL1_`R)B!ZnG?x zA>KCRiG(liijn!eTG2lkdRl6dD9BE1rzuTZkt5;O56@hRKeieA>{`2yxQ&IYMQ+^= z)i!M<0AoK3^`?&aVHT=8f%F$(I7ALp3G6M;YFSYbo-R7olsce})1yTb6`{!QUhF?> zVh1!80!5_1BukU{hkmI^mxMKwUtf8l$l~hvso(G+ZMt+v8p6l^8D3Wj<35J{vbhmu zysmKr1;$&9B&Y<&_-rb4qGs9d$d6ntd9$)}*N2J{EZ6#5!`U(ZQN!W?Xt?X&H5``n zFAdkV0RXx=g|q0`bEliDINngF#ydIfxs|49?;l72M?gVE(1#1aKxSof$mEqE)2rN| zUunbiA03Dhb-|m{!L=}%TIR-9N**BYw5|(BU#2F#``!db@RhJZk7XEG+tzksdn!7- zNLsdu0!B)M3O17h%G?-iR*wAqQS~a!ETtW zg9Y(js}&u>(Q^C5fbJ~b7#QkFCu*$7kvmSG^g!wIKHlF_FA^KNYiv(6{CK@NLOI64 za0!1+wES}OTta6}eBig;x5V9oh#^HpyHy78SK?x_8c$a&1*u^Oq95ZcaX@LnK4)J9 zi3osD7qsc?wcpq#uEjlfB=PCr<#7#l0IN$&y@L_21le7IrtU(Xjb5CCRfPrwx!n0& zWFjEwe;!T_B!8~}mvi5K;h$FxR(r_5bTeUR&RPqq1ef)KYwSZI(TTgY#kxVZM?dC> zmAe{A+~QHqv6STVBQqH;>6r>n_?)%TgWWXso}{v;IyrW2CARXlmuqaN=WPz2rhqBt zX_yp+ohd|^DrB;Cb}+lHO|2t{I1BPQ;0ILK$m8HjjY9)nWcZ2|z zh52Tp(>F{VcZ$L_fs2${uaKd_Xd{zAIYJ!#nZe z6QG;+QAa1sP!1icbj=QVny}8KTy43pvkr03P$h0+*P+Ha!4zGDX+)G5U+y50;X_t6 z7zJ&{Va2Qk!?P-KKTNXay-n-o+pr~X@TQ}RWSnNU#Ei`;^^T$(iZx7`o6U_a^Y1;? z#CN3S9H}Y8AHc*zIp8mR4>r|Mf=Xn!g+ivt*xHC+N6gzc`e{1L&xk-8dEo92%!r2P z!JiKwtk59QSzfs;v10GT3)!GJNV-9bJv*Ky73j8%bj}z3p@Z zFtbe_`y6qb^wmQj`O0p3kx4;y^i%QnC9&qiJPiE#cHGoF@sGL0AH8`*SmI^-3aqtZ zr3KKrEns!|!oi-y!8B2;XCNxXUmmKw-b7&H>sy8fqBby^i#Eh>>$w==HZ@)Ro3sR! zbfL=j<|f^KZU$`UK6&4>YkDP(;WORg4CXVSXCTf@SwNf6EIf9%_WG zt0wMTj+sZx}7)xNed7kb$#=W8!0QZ>y z>UPrw*y#Rc*}G;+8U~K@Y{5#Q%UUQ?PDD$kgh8W1I?>YRE?4OE^6_SJ9z(?PsNH2i z41THWlekp;c?=90OAW5wpg+3)DV@CTi7$baxbGegT_=l5@qL1Xs`IsH$|8S6Y{ncC zE#>h5rnajk3onCmr$WCCt+|^oU;TleeSZOvR;oMREjyD7`6^U$F0tAFOY-aNqd%qj5kc^k?Z>H%WIakz6 z!-K04aQ=o<3e&3^!1&_?gc3(bS8}oldq1<700}vjr&bH0Ac};a%-cFh%OYr^O7r@) z0TvZ5`s~m|^G-#-HN5tpH5}oOhP(V-!;xD5`ZphBVgMj?lomR&J@J^w9#wMYm@tFd z?q#mt=6!-aIk_X`2l`V zSFqhphx*Tl3-N0$KwmD~kL~7O8*v3e5rCxPe6*WFKXs7{#AG&($0Z~0)SX6xPNaCe z;Y7M~4XU@|QtQw@hHsvb%@zh$p?a?wfKV*`kYw~wmM8Ss@#szC(U5%)w|I0`(*+~{ zE<^YQG<#$2(f+y6y{om2w4og%^h#a{f_9unA+Ez9NdkgDK37!>H5JEUyjpF+Rz5Wv zk0fB57*s0*mn>wLYecL+09Z!zzA?!+lS~Mj)2bN=h5D}hjbC&Zmsa4m{yxU#i!+sB zNb;mb4O-r_eY2%Oq=kgVI8NiK;*?tyA?g>`Z>QSiVm>I0eO=A$ON_b4j zF+rl@pKyNylR#t%f;iP%(_wI0=`*7kg)k#Gz=SeN;aV z@g_6@p5~kT#Nkl7rzbSAT8TM(6S}*<>LT9pZQmeYzLWv@wYl)p{%kR4Gu>=03IPsP1oEz*rzY6XV(-iWElx zFSpaiI&7tyqy0)j#R8`)wAkZYN4>om5hF-2@^Hc%S+0RgF%vld_(L~;1x z!FqXu9p2ep<|6XcgT3wOj1|c$wO2i{QC+*j zDr!cCcGW2R8oga{1Fp$fWDeBnfRg6ay`2VAvH7265Pp7NIFXBrQ9sS$qgI&nXDc=; zM}dic;Y>w^((2Bc^M$7I9>nQ80X4*ydJnZ3xZ={v+R{t$9PEbwaGT8ByXH#GB?3Aa z6nPPEGJ8*}T_2NB}ZA;55S{Z_@=_VJ$k4^ab9Y}omo#W2x|9zRB6T~|AIfB zdl(@Z90L;GJ}C&R*{`XD4rbU>Ku8kY8&Uawdz7gZwZz1qTCE8}pUlidXb+SH@=RzN zuQSfF`{wN$=X-^~DGA4Lscge?uk7G<5{Oj?Y*WDqgrVZ30KeJg^-?T*EwyA9w zCeo3W!+Dxq>WfiF0+9b5^x`zhlohLU10>)xdkf$h_(btk@JnXcBQ6f)$HQw44^*cd zEmWX73aU4iF*HxDClBAGnE&b?{h}Rto{Bt@C}X$9U}#{pqrFPV#I)QFwtNogA{td% zlv{Uej9Oo}h$j5nVS_xiElO-b8z`V>^VEEnBcYNoN?9R@h{782(R>vMg%M5h`?y}G zEUjUMx`8>aZFCgxzcsuE;~#tLW`BC? zIsd!24$JwwxBkKT@4a<8%zyL)#6N!E{C7XVVEt=PUn&3q$W6j9F9rPv%5b_DaJrfV-*bF z-HGM4cJ*rHDG$f9OW1g88Pahd+B}Da+Sy?^I46DQPi>h%(rE1WdPn=hEB2L$ zyGKHj>nh^#s+QeiR0yso4!v{*y#kI&c>r!>uNDd`&rozTIr!*yg?)lLj!C+;M^1f7 zxYrMUoA#ww!_}kByW&!1pTVCXdOimw+CGb+Z|!@-hBOP3;Dj z4R25mS^0bgU$+SbMJ23LmVRu97~HN7FV)nnDM^GZD^vBve6 zu!qoc4R1NkX7E`H%A~M2VPG%1Sb(JV|kasV37+j2iQqP41 z9TV4pq4CXN!lG9f6g3tuU32vsT~WQ+3Q6`)|2XvdaErt`<*KmY4IL57S@l;o=n?AA= zl5gCQ`Z_FoFl!1uRIJ3V#=r{4R0TDfozm)QK|QYUW>=kakVu8wyG|xO6d@S5qf+gf z(W&@;39#yp+petdb9zH2hbuF*kd2*X+Ft^JxH3B=FCS}-TJH5>lJ}>`T4A)GA3&*K zNtHh9t?517F?j=JpE<^N(FUfUJ6LaVv|10sTQ~ufyR%cXY@xsC4SpwjdxiESE}_8` z$FjAHZ%O9K9hB{S2jLY1;sLxlkHPz|E zHQ1b(a^W9aH>t527ktVYCl`Cufgd;%wdB>nmQCgE221q81U0Ox)Z`}BJ(FB3%^&>;_gEI*b!f-W~i zb{v-z$u~=k@15@udl~E=d$A40QQw&5IB|yD)0N?KyqdX|T6-~(iez6jscap7EHwcm zOiZ|_4u8$x7YO$xgVX>}K;1rJ&7<)IWl`}4^wRlV?;JnxEGP-x7k$06saLU4W z`dNRsyQ2P4mk`Ac**6n7hziSIP@DD{c|p5cj5X=Dnr=t{&^=52>2CkGhJVKVM?WzC z;|JOQ+YgXhfBV5x=fC^G%RjR${;;zCHw(A%H|wJJ-&vor{?S{I{&#^h?Xi?-OA{Yug# zn=+KTK{y0!^DcVC6;{!xE94= z40<=QFTZHRlJaOE_zr}~e*uA+hZx7l9k=9<6?dY*_rmt(yL}SM$l^R&X(ElHx``lu z&z)A;ao%jSp3_YL+?K?>o`PDjkU7kS$X{Q2D_SdaTY^yzrb!WyWd3YOMQV!6-Hdq{ zsX8nf$|TTIN8%%y&o}!p9HnRR2p2<+(^O`=O|gjLW0&tRLH*q{{Nk%#8T53IV2C6& ziM1e+F}`zGvAn4AwQgLuNUU?giFjqQb_$#}y~>9Wg94-iuln(gg;p9t%FAUfQ?IJ7P?IVvyjs z<{MTeOZSq(i+K620*Utt;X<6N`bfTud}($Vt^{;pxzr12Nwkcnj7$jmDBIxO&i&z> zGNQWR@m%=yLxHym0zv6P@pPJ(A&Yrm(j9sj5A!>Nh%P{CuhIIFb01unjTpYc9;30i z4>)8Odxt=p%%I|R!Ra+cCB7IQgAZ0o3#gTJ>K`9^07=j`^W>ErGQ=By9lO@n0Xl9- zSf3W8d{P#m|A9%0=rvQP9CAPpfkX)6oi5HPmz8r0p~jcBfNjPmGG6SUYyoM2u<3JK z;9tNdrRJEIyTvGM2@V3?;OVAm$s1$z@USg$a7&kQ=#y$)Sjv+-)SdG&LMoDxz5Iib z`wE-ejA>G#=(fDaX5>w_wrQ=yt0nn0Jl2}9iS09SfMU|Yxh|Z8{X-6}Y`jQDdpE+w zJd;HEp7!Fl*3VYVS*Okdit=U!C8lX?BabE<25s+ zr?2uxq+kDMyhz%^x1SHolHE=?i&dSTAwA&ys32F-j3jRl%Lv9NElmjhzLlZUg_QAu z);!WXM+H``-34nWGpDq;LRzXoB3gndv@-2ic46yJk6U*k+=@|0mK8Zo-G&YBGx@Dn z>n^+I`qe9Rueauu+?QbJ#iecvjSW$1oTQdQUv2-X>kq&d=Bims9MgP$B;J%-zQ3q*5Dak#>1#k z5>yzKK({(E{}jDkyrwtt(POe~|M8};2F!%opXO$}{B}u@eq;a)y=N6gtR47mD*@WX z3*?0?j7yhfMC$OK6#`yzgdS?@`>=y zE4^yTB%?IR?Z;>AZtJA*K>H?y9U{^n(^STBdRCa38FJayI4PH8EB5}9LwmqKT>}S| zkwMZxbqKFaTIb(M-^_%>rWL^z>y&iEDj>I3kQTc!BWjU2)Kb|iZ+1Bf?=UCMitsAimsbbhbeVoXfFGuBEJZQAk!r=FqK{;*iWCp5B9tLW|F0D zP@v7%QEhw)x^-k6T4syGB&~=%o&JSmRHizorLo)%w&^}fHUc5ZJJ*&YhH&;e8F>VB z&M?&aip&M49~)%!k6Z#J-A=BXJZKs-ISCvyT!VQt= zX*gQu?&9p`RX-bh@X*MlE;cg`S?xaQeVZqcG!%dw5d&TwToYfHz6NS#9Q0_Px7kka zTxH`^h4+w+fe~ZSx2-mP{5&WJ!bqaOG#NdaM#6_(Gx5oxYe&>PlMP(ham_;k2W6b+ z>WHtGFUasmbh)(Z*7p`eyZ1?`2WW9UU$nc@Ch~}8+UOqv>LIjN%-2NdIW3aIDyUz% zs$)Q?fsYHGdhHU&38zfX^arm^S|ZgY0vBn;EpUp>Eb0J1a%vBDce3Z2MJM#w5>Aa9 zTWHhJ^CxYUwREL1^11w03HO%>&}`-3e}0L7l(qsa-i{R-GIsrJisp8)%74~jm;w56 zH}6|A@uTzCkNc;bhwXIsJofL1=ZtU0F58W(g~u?%sCe0y&nLb=(!*^9Ku%QNVo z9+E1ODZl=Jd8Vef!#L9as9~jiCiu`^FV0kJ?@vVPgW+0b^=b+5+#62jPHtnQfmDZG zPPgVL3Hu-hGE9Z_ zaBMjDvX*bAkiUVn=EjRXM;P%>$^A4!&+6`h#{NHjoOv`9Y6He+7*v)PODH${Qn=TW zrIFoWOd2J|zGO-o#@-;ZUdm_5GBb#5Q!=(I!jQ&b3XwIGZA{h}vJ8p(GUt5X>2~kw z|M&c!=e&PB?|Gj;9v%GeUse0dI~R4_<}OMXmTvlGuF=wJO6|O4PZ;IA84Ot#?>-r; zKF%9Fvq8w{eLsZn&(~UbUV0u@j(rLQvag=OaFqcMyYJ|ZbF_2`rH-l3ta8;P zVIK$4)|)TbkOFGb9p~3m&cLl^r>f!lx9J#L1|$cgkTaGnZ~xGDFwf}p&BQgx8L37E z9a^8bDN`VSd^qgg2O#x0fzH!8*%3Y1{)ul-=Pf!@{4#odGGk>vRpV(IMc&&^U0ILd zjJ6Kjkg-0JluLQjOfG_k zohQ8M`6-W@tj@6sShd-}Bq~-!dG&!q3X^_P=MiTm>t`Ma1CH zbpYVG%9Hwzb{WxL1##w_D<~unkuQ}+(%Z$1pud8-u`jqiB@RZY92$Yz7L;u9nkqdR8UJ*x>#8~V5)~I*j1yfL2y69MJ;apFwliQbZgL_b z;-~r!Vc5M4ALpncnxqmx%2>GEBNjP%nK{wF;nsfNdle+-sj>1^QZ*u(nbe`*5(p}| zHrw3##$JzM(}r860g=Zxcj@>(0vmPanA(C~-G__X$mRG-n1O!CaoI>kW-q<57P)~| zZCb={<+-Moxud(I#+z))47xG`e5WP1-LBLy`(0dwNd}=-oR7RsA6*C`Bnx$+TDGgM zA!%&)xy~CCPlCcLh$?nU?OD#|@|I`O{F>cka?6T+1kFiJn{CUDGoMU#&JWIo7#~<3 zm}{bfFEJV$s7v0;i$Iw1iPSQ&${eKNGZb`@+&sj9QJ`h*Ii& z$-e%;PlB2F_&!hGSj`C^bG=iJoB=J2857P@87O5`^7E~Ybgt&y68VHGEkHy5H?ln% z4|xuZFL9Cdk~ctUB~;D3m_OTjR8*NwK{~v}U)WaSUEpCSa{>7-i6rbo-7zGZDK^QR zJ3m6n#P3u6Vo)CS{^kze@~@P1e$|qk<-H8OkFol06F@7R)8e zeRvF!U9dN$?R`B2)o__dc8U`5Z$o3AlwH$0~Xq^Qk{Gm@z7k$Y|saR3@^Fm4H zWKV&+#ZAnc2&Pa{@M`HsjyrBKVZIhjT&ICu8T>Z0$;JNT^uP{MwXPA5VW7`TX!pT` z(AeSrPWSdYkm3R*;sFAuk+8WNL3!qHBd_t4+93 zo{fF_m)aIs_#3bunsk1k#lH@ z-`a^_A)J6upjG;IJx-yacwzA)b*v(dBqF$fsLf6JZr3TvDznYzv|gF(Z5~!$y5SsU z2Bm4Q%P3?^%zoOA{r1ZS#go;bWc{;2k*nBmQ0SB&8`tkvM_Z67_vo99wyRYbi|M~hajZM$- literal 0 Hc-jL100001 diff --git a/tests/sslv2-tls-upgrade-01/test.rules b/tests/sslv2-tls-upgrade-01/test.rules new file mode 100644 index 000000000..60c764bb5 --- /dev/null +++ b/tests/sslv2-tls-upgrade-01/test.rules @@ -0,0 +1 @@ +alert tls any any -> any any (tls.cert_serial; content:"55"; sid:1;) diff --git a/tests/sslv2-tls-upgrade-01/test.yaml b/tests/sslv2-tls-upgrade-01/test.yaml new file mode 100644 index 000000000..a6d34a6a7 --- /dev/null +++ b/tests/sslv2-tls-upgrade-01/test.yaml @@ -0,0 +1,19 @@ +args: +- -k none +checks: + - filter: + count: 1 + match: + event_type: alert + alert.signature_id: 1 + - filter: + count: 1 + match: + event_type: tls + tls.subject: "C=US, ST=California, L=Sunnyvale, O=NetScreen Technologies, Inc., OU=Security Team, CN=sigdb.secteam.netscreen.com, Email=aturner@netscreen.com" + tls.issuerdn: "C=US, ST=California, L=Sunnyvale, O=OneSecure, Inc., OU=Fulfillment, CN=jumper.sv-staging.onesecure.com, Email=fulfillment@onesecure.com" + tls.serial: "55" + tls.fingerprint: "8c:90:bd:2a:b3:ae:e6:0b:d0:ea:b7:86:b0:1a:e4:b1:cc:57:ef:22" + tls.version: "TLSv1" + tls.notbefore: "2003-03-29T00:57:44" + tls.notafter: "2008-03-27T00:57:44" -- 2.47.2