Hello Alexey,

On 10/18/18 11:17 PM, Lukas Tribus wrote:
> Hello Alexey,
> 
> 
> On Tue, 16 Oct 2018 at 14:18, Alexey Elymanov <strangeqa...@gmail.com> wrote:
>>
>> I would like to propose a little patch, based on current ssl_capture 
>> (ssl_sock.c) scheme.
>> Purpose is to be able to sample/fetch TLS extensions, it could be useful for 
>> debugging or fingerprinting purposes (for example, cURL and Firefox provide 
>> different sets of extensions in ClientHello message).
>>
>> it provides two hooks, which should be enough for further Lua 
>> processing/request forwarding/analysis: smp_fetch_ssl_fc_exts_bin, 
>> smp_fetch_ssl_fc_exts_hex
> 
> Looping in Thierry (LUA), Emeric (SSL).
> 
> 
> lukas
> 

I disagree with the idee of having two fetches. All fetches available are using 
only on type as output and we are using converters to change these.

So smp_fetch_ssl_fc_ext should output bin and "smp_fetch_ssl_fc_exts hex" or 
"%[smp_fetch_ssl_fc_exts,hex]" output hexa.


R,
Emeric

Reply via email to