]> git.ipfire.org Git - thirdparty/suricata.git/commit
tls: Integrate ALPNs into HandshakeParams object
authorRichard McConnell <Richard_McConnell@rapid7.com>
Mon, 28 Apr 2025 11:02:04 +0000 (12:02 +0100)
committerVictor Julien <victor@inliniac.net>
Fri, 16 May 2025 19:33:54 +0000 (21:33 +0200)
commit6c1238b7bd0943054cf3eef1128ba1f02418238f
treef1458ba65f1f13c9053fa70d074f36eac1e37a11
parent468a037daae704edcd0a931aa369d6fcf162ffab
tls: Integrate ALPNs into HandshakeParams object

Ticket: 6695

With the introduction of the HandshakeParams object we're able to
utilise the theory further by using it as the object to track the ALPNs.

The HandshakeParams object is now responsible for holding all ALPNS. The
user of this HandshakeParams object i.e. JA4, can use whichever fields
are needed. So only when we generate a JA4 hash do we use the first ALPN
and require to format it. Other users of HandshakeParams may opt to use
all ALPN's i.e. during TlsAlpnGetData().
rust/src/handshake.rs
rust/src/ja4.rs
rust/src/quic/frames.rs
src/app-layer-ssl.c
src/app-layer-ssl.h
src/detect-tls-alpn.c
src/output-json-tls.c