aboutsummaryrefslogtreecommitdiff
path: root/example/reader_util.c
diff options
context:
space:
mode:
authorLuca Deri <deri@ntop.org>2020-05-28 17:44:18 +0200
committerLuca Deri <deri@ntop.org>2020-05-28 17:44:18 +0200
commit9c3bfeca80a5064ce5ac689002a9f518d0cb3347 (patch)
treee845e6d58531680c7466603b3118289042a3fa21 /example/reader_util.c
parentf6038c358a71ab43bd1e1b53103659f62ea5adce (diff)
Added support for Encrypted TLS SNI dissection
https://datatracker.ietf.org/doc/draft-ietf-tls-sni-encryption/
Diffstat (limited to 'example/reader_util.c')
-rw-r--r--example/reader_util.c10
1 files changed, 10 insertions, 0 deletions
diff --git a/example/reader_util.c b/example/reader_util.c
index 1feb2d7ff..2c719286f 100644
--- a/example/reader_util.c
+++ b/example/reader_util.c
@@ -489,6 +489,11 @@ void ndpi_free_flow_tls_data(struct ndpi_flow_info *flow) {
ndpi_free(flow->ssh_tls.tls_subjectDN);
flow->ssh_tls.tls_subjectDN = NULL;
}
+
+ if(flow->ssh_tls.encrypted_sni.esni) {
+ ndpi_free(flow->ssh_tls.encrypted_sni.esni);
+ flow->ssh_tls.encrypted_sni.esni = NULL;
+ }
}
/* ***************************************************** */
@@ -1121,6 +1126,11 @@ void process_ndpi_collected_info(struct ndpi_workflow * workflow, struct ndpi_fl
if(flow->ndpi_flow->protos.stun_ssl.ssl.subjectDN)
flow->ssh_tls.tls_subjectDN = strdup(flow->ndpi_flow->protos.stun_ssl.ssl.subjectDN);
+
+ if(flow->ndpi_flow->protos.stun_ssl.ssl.encrypted_sni.esni) {
+ flow->ssh_tls.encrypted_sni.esni = strdup(flow->ndpi_flow->protos.stun_ssl.ssl.encrypted_sni.esni);
+ flow->ssh_tls.encrypted_sni.cipher_suite = flow->ndpi_flow->protos.stun_ssl.ssl.encrypted_sni.cipher_suite;
+ }
if(flow->ssh_tls.tls_supported_versions) {
if((flow->ssh_tls.tls_supported_versions = ndpi_strdup(flow->ndpi_flow->protos.stun_ssl.ssl.tls_supported_versions)) != NULL)