From 808050e6357f0c84826828f1922ac1a29803845b Mon Sep 17 00:00:00 2001
From: Luca <deri@ntop.org>
Date: Thu, 6 May 2021 08:56:01 +0200
Subject: Add extraction for TLS signature algorithms

---
 src/lib/ndpi_content_match.c.inc | 2 +-
 src/lib/protocols/tls.c          | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

(limited to 'src/lib')

diff --git a/src/lib/ndpi_content_match.c.inc b/src/lib/ndpi_content_match.c.inc
index d96a87ce2..311c8d2f3 100644
--- a/src/lib/ndpi_content_match.c.inc
+++ b/src/lib/ndpi_content_match.c.inc
@@ -1,7 +1,7 @@
 /*
  * ndpi_content_match.c
  *
- * Copyright (C) 2011-19 - ntop.org
+ * Copyright (C) 2011-21 - ntop.org
  *
  * nDPI is free software: you can redistribute it and/or modify
  * it under the terms of the GNU Lesser General Public License as published by
diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c
index d970980ab..939564994 100644
--- a/src/lib/protocols/tls.c
+++ b/src/lib/protocols/tls.c
@@ -1625,6 +1625,11 @@ int processClientServerHello(struct ndpi_detection_module_struct *ndpi_struct,
 		for(i=0; i<tot_signature_algorithms_len; i++) {
 		  int rc = snprintf(&ja3.client.signature_algorithms[i*2], sizeof(ja3.client.signature_algorithms)-i*2, "%02X", packet->payload[s_offset+i]);
 
+		  if(flow->protos.tls_quic_stun.tls_quic.num_tls_signature_algorithms < MAX_NUM_TLS_SIGNATURE_ALGORITHMS) {
+		    if(flow->protos.tls_quic_stun.tls_quic.client_signature_algorithms[flow->protos.tls_quic_stun.tls_quic.num_tls_signature_algorithms])
+		      flow->protos.tls_quic_stun.tls_quic.num_tls_signature_algorithms++;
+		  }
+		  
 		  if(rc < 0) break;
 		}
 
-- 
cgit v1.2.3