From 48e7aed4e568428bb83e79bdd7abb0e55c9a336a Mon Sep 17 00:00:00 2001 From: Pierre Chifflier Date: Wed, 13 Nov 2024 16:39:03 +0100 Subject: [PATCH] ldap: add test for STARTTLS extended operation --- tests/ldap-starttls/input.pcap | Bin 0 -> 7401 bytes tests/ldap-starttls/test.yaml | 27 +++++++++++++++++++++++++++ 2 files changed, 27 insertions(+) create mode 100644 tests/ldap-starttls/input.pcap create mode 100644 tests/ldap-starttls/test.yaml diff --git a/tests/ldap-starttls/input.pcap b/tests/ldap-starttls/input.pcap new file mode 100644 index 0000000000000000000000000000000000000000..681bf12ac89473fa20904c108714568b8c6fc336 GIT binary patch literal 7401 zcmb_f2{=^!+di|{iL4WbLDq_4P_}H@6;iTguOVxNq{uF7D%naADn@0=79}O2ktLdt zHOq^THH5x%GQCY-|NmFtRnK)jW6m+>+`s#N?&tZP)Bda|6AmDO?|}qh;K5mK;(-uh zdcX$!4kcwo^w>d%V$^ETABuo3qzu?4dRX{6t27QenE}ts1F!%9M}DbA!fEN@yYfb$ z^DqR0212{^$7rzdOZ0d`djW_jo5A`s8ie=_?IDO}2BJer8Dwsl-{vL@A{GX*z{~(K zkPB>s7lZ_HViu(be8Ag7Nf~4m)&D073PjQQ5e18e!(gXSL7dW(I7xX)X-QcyrDf&i zC1tQ!+)ii_Tfs&A8C9~dg`lve|BLGAH>v?3iWA5YO3ENpmHai;A5b8w^8Zr(ih^YX zsru2-!$7+tzZx{^kC~ATY6=#y`adum4FUBV$_0RzASEa%gUsy8ubKUT0x?Vf#;iaT z)Nhm%0RUcL^SB`p2Z-7suhKp7ThZI+2d7!RtPc`!i*rmP_dHYm=6D;40N6q}01s#Z z3VRNCh!C;5{`ty zVQ@G^tv3$<@YCz($#jLGYSUka~P!6@aw+KfpS=OGphr<*McC5if{4P}<3C9!l1@JGh9 ztbx=3s;^9-wSNNF{%5u(m!%$0=-~LV_)u92L?ILy0RZse`k|zZ4Ta#+zpGFO$2W!G z3O^|XXJi22v;dq6fWxsNuyru;83?FIbU-vsf1G{^{TVD1HJwC+Zp0@h7>t1mz@nr% zvFy}{gGdA;li?n9V~nY(A;$a2NpCD47n8IcRvIUbm66^hqhQI!Bm*AG>>?ljA6Ew7 zphSUD0f^u@02>?y4-N*>TuvqzR@*q9@D*1yuO=lHdcA)PKjl`6fqAcZdio3Yu}0ce z#YFnA(w;Fe@52l3QaFW*qw{cdihPtcAY&R5wxOU7=SNj37U zsXXv_TM(G*xAnG()VYf2Nv9G^p2;QbaHXs!UiV^(56rpDI_U1eG8_R~ILjEj4~qs_ zqcTonax%2J3b*;e(2vqNEDVc=s*8}5&8iek_wA}!M;!u z24zKnOyOtG5gXVwWJ{^+7lvjPbsRhni!3KJyH=`aWoMko5(wBPAXqHelB3-VaG(M& zJWra?;<8KZJDSgm;XAHL+Pz<2EK^83JXRO=e(wyoR%Q6*?WEeda-(}WdWSEZn(8uA zp}jtDU=I7Z=s&~mM_@i~fG<1(RIrU(8wr&AY6Fn%m_Xb8EpwAZKy%xC-=4mkn*&6# z1zim#Wsuun{CCYw68UCsK>8v^|71d zZYB%44qI4)qbd-)_qJGWtBf@m8a?ROmT#r%r55eC-Tx|<&G+%g;VGxMxlLz9O?TE+ z*Ws%wwcaPMH#Z@7P3P?ML%zDP=A`n1Uq(=%f6iOzwdMFu4!Nx-+#p%^76O1Z$P`M- zAQKk(UBWWpE=VRU`7dEHXb`f4LmUQ!unLL*pc@2%k}}9xIlql%@h{fhAF-efBM7GB zyeV>U?P`R=frJvGVw03oTT#*H{CLyD`h86rOZu}&%B<7+&bGzIBW~!mMvm?gR*A5Io;;cs{=7a~Ik za#kN!=a0R-BG>)051$fIa9O@)A4Mjv>xu%sq)Cgq1eJjyEsz0#Z zMpO8L@WpJBeIYRqb)B_>o;Kd=L{Jx}d!&Mq_l&FlF(TEVm3xR5U4D}o zprj0P>8O5PI&$xfud~YHz+J@?#za}V>Ort{K)-PEs~m=-_e$R@$a6=&aYp-gZqZ8E zYhfo)vs&tORQ`T9@p`kZvYSPWRU7k*#7`f>&(d@8`O4nnvFMCAYT(~Nm z)ZOi08yER|J;gsXM+2XCsRj?~btP;wnT}c^TAVUcYg%~ju;6g0eYJiQ=dwnI|CK@R zR8wn{%PS#EXiQ`Kn2rZN^L6)gcHYXcro$}6l9>9fn9-02+?TuQ7V{QI!%WiL7CTZD zoR#FKilg%ytei#Y?PVb9uR-d6W6a3n@Ptk$aLkPQF!hgH1 zI-Ni-_(5$2|K3*6QfHxw*ss=l=y_tqV7obURijk2b$uq>=c0Le7MH%ccx8?Vv6UgV zOe0sBYw=ClNgBHwCQ=zCnp~A9`aau}KHhp;>~^mE-H6-%B*Z_XMuhAv1wvHsqiPOX zcb3kKitcAuYv}gj0>VRVvMO&8R3`I=5My# zoZKt9m_5&dwtXTf_IimwubiLr}X z9wX!kr+KBs-?31R)^x-DLp;@CdY7Tk9pAML<%%d)lNY}oLwDqgg<)#)$KpDK*K^JG zV0x<3PAs2s@0hQzf2gu$%(0^cs)^X?8e)GN;4t4A=yIRFFoNDnn=yx@-2dYB_e{CD zF2|-`YESMSFN#bOx_NM|A7|<0{Mec&d&Xy^ovO^cO6WOGC}?qad9o|9S?y7X2O2l01$%MVZJ)&qMh zh@!VvAuA<;C@$7CfE8#~C@F(%SmEF9tql|uEC{~iTW{5($%cgkRU|W$c87D}3nKCO zdoeDRbnHt{jJN1gkA#hDVI6HcFv^m)_l$EeosV-L| z@=eE(iC=bB^-UJ$sv7QoYUo54)e+csKXu4mJ#sEx$oxGhCtkYzF3+T{pz_fHx z+co0#a`fM0#?Q3qrBtcQNzc)p->%hh?*(t|2y*P`ma>HNT?(*6GxbMgb-Y;1Pa<(* z89W2+RTa|y9A3c$diYZp>WOa7rFW~Gc6NYr1CD!}%05*W8gmk`#_i|1rXF-CM1cOa zFGy3ZYn!g}VDzKT_~MnkwC>m%TN7@V z14Zt)UarL+<<{Jr_-LziT5U=L5SYR%D9Vhg8N`--usyB*X-8L);JX3BJY#_Q!|9jF z2jkSIkmdsoZCkIz*{W`D(q(w?q5H}Gz?ZzU$O}rg%@>cG`Sft{ZnA@{>I^YoGtk4LGpNY@+HYZ-zE6>a!#J{jfm$bhV7YeNHk20aEP zWst}C^IuzS>0Gy4dfF??-)uN#>p5cFF1|_#rW*R@%nIkiCYoLGHcrtZh z^^ggmIbo%4jrU~1km{C{yQ1AR_P!ck({e2km@^%EbQLyiK4EO9?={93pEj!>;!d+- z{RG3H?}$d?^+#OUYE?|%kjfNZwOlV#d3k*8xQEdxbY)kjO^wq!OI@Nm&X>{oGk>wc zivo_Z`Sd%C%kNwTjuf)nbxi^gf%O%^*V#wkEj1c6fgjeS!-0PO84u(!{D z?`^2-YS9pifCJ56**D23C=lh}eRBil>%Mt4Da29rkbT7|((R~0~D%_C<-~k^+p`;A5 zH->-P8&jY+o__Vl>eRlH+S#xq-^SkscQC%cf|AJdvRF?9;9rP<5|yO@s$^0 zFHPjq2;;< zq`z*CM`-SLV49_W`6tmKtGhYvA8zh1zH_pwq;G*o?^3SAazS9%3ptDPBfJ9@mu){D zDB{}`UsxIg=Ufptb&eh{T$pu=*u&VZWiN?aJW7*2rPRya;~4i$tr6`rO>(A@-J{q# zpxPR~^USJyXG>x%!=@qMq~*}k!OIH0L}M-zyUj97B6V*a(Pu#|8P)Onl|k%S+tPt> zme2r^b4&I^ZXEA8-2EFF3)1L$gFB>2G#0RICo C6Up!Z literal 0 HcmV?d00001 diff --git a/tests/ldap-starttls/test.yaml b/tests/ldap-starttls/test.yaml new file mode 100644 index 000000000..56e0ab5f9 --- /dev/null +++ b/tests/ldap-starttls/test.yaml @@ -0,0 +1,27 @@ +requires: + min-version: 8 + +args: +- -k none + +pcap: input.pcap + +checks: +- filter: + count: 1 + match: + event_type: ldap + ldap.request.message_id: 1 + ldap.request.operation: extended_request + ldap.request.extended_request.name: "1.3.6.1.4.1.1466.20037" +- filter: + count: 1 + match: + event_type: tls + tls.from_proto: ldap + tls.issuerdn: CN=LDAP SSL test + tls.notafter: '2025-01-28T02:18:29' + tls.notbefore: '2015-01-31T02:18:29' + tls.serial: 00:8A:07:E0:8D:4A:B5:0A:7B + tls.subject: CN=LDAP SSL test + tls.version: TLS 1.2