diff --git a/tests/ldap-starttls/input.pcap b/tests/ldap-starttls/input.pcap new file mode 100644 index 000000000..681bf12ac Binary files /dev/null and b/tests/ldap-starttls/input.pcap differ diff --git a/tests/ldap-starttls/test.yaml b/tests/ldap-starttls/test.yaml new file mode 100644 index 000000000..56e0ab5f9 --- /dev/null +++ b/tests/ldap-starttls/test.yaml @@ -0,0 +1,27 @@ +requires: + min-version: 8 + +args: +- -k none + +pcap: input.pcap + +checks: +- filter: + count: 1 + match: + event_type: ldap + ldap.request.message_id: 1 + ldap.request.operation: extended_request + ldap.request.extended_request.name: "1.3.6.1.4.1.1466.20037" +- filter: + count: 1 + match: + event_type: tls + tls.from_proto: ldap + tls.issuerdn: CN=LDAP SSL test + tls.notafter: '2025-01-28T02:18:29' + tls.notbefore: '2015-01-31T02:18:29' + tls.serial: 00:8A:07:E0:8D:4A:B5:0A:7B + tls.subject: CN=LDAP SSL test + tls.version: TLS 1.2