gfwleak/stellar-ssl-decoder
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Feature: certificate decode

Browse Source
This commit is contained in:
liuxueli
2024-08-06 05:51:48 +00:00
parent 91ec4d1ee3
commit 4b3d68bc66
30 changed files with 3107 additions and 222 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
test/case/client_hello_fragment/1-ssl.client.hello.fragment.192.168.56.31.53868.74.118.186.107.443.pcap Normal file
View File

Binary file not shown.

BIN
test/case/client_hello_fragment/2-sni.client.hello.fragment.192.168.58.17.49218-23.216.55.29.443.pcap Normal file
View File

Binary file not shown.

BIN
test/case/client_hello_fragment/3-ssl.client.hello.fragment.36.251.161.167.39777-143.92.57.79.443.pcap Normal file
View File

Binary file not shown.

58
test/case/client_hello_fragment/ssl_client_hello_fragment_result.json Normal file
View File

@@ -0,0 +1,58 @@
[
{
"Tuple4": "192.168.56.31.53868>74.118.186.107.443",
"ssl_sni": "sync.targeting.unrulymedia.com",
"ssl_client_version": "TLS1.2",
"ssl_ja3_hash": "bc93a67ef4492974195865dc0262e65e",
"ssl_ja3s_hash": "b898351eb5e266aefd3723d466935494",
"ssl_cert_version": "v3",
"ssl_cert_Issuer": "Sectigo RSA Domain Validation Secure Server CA;Sectigo Limited;;Salford;;Greater Manchester;GB",
"ssl_cert_IssuerCN": "Sectigo RSA Domain Validation Secure Server CA",
"ssl_cert_IssuerO": "Sectigo Limited",
"ssl_cert_IssuerC": "GB",
"ssl_cert_IssuerP": "Greater Manchester",
"ssl_cert_IssuerL": "Salford",
"ssl_cert_Sub": "*.targeting.unrulymedia.com;;;;;;",
"ssl_cert_SubCN": "*.targeting.unrulymedia.com",
"ssl_cert_SubAltName": "*.targeting.unrulymedia.com;targeting.unrulymedia.com",
"ssl_cert_SerialNum": "0x888d5e51787e0f1f485dc542465d2034",
"ssl_cert_AgID": "1.2.840.113549.1.1.11",
"ssl_cert_From": "230510000000Z",
"ssl_cert_To": "240510235959Z",
"ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11",
"name": "SSL_RESULT_1"
},
{
"Tuple4": "192.168.58.17.49218>23.216.55.29.443",
"ssl_sni": "www.missionsports.org",
"ssl_client_version": "TLS1.2",
"ssl_ja3_hash": "a69708a64f853c3bcc214c2c5faf84f3",
"ssl_ja3s_hash": "10a2ad147a870ef37af153dea9fe4dd3",
"ssl_cert_version": "v3",
"ssl_cert_Issuer": "DigiCert TLS RSA SHA256 2020 CA1;DigiCert Inc;;;;;US",
"ssl_cert_IssuerCN": "DigiCert TLS RSA SHA256 2020 CA1",
"ssl_cert_IssuerO": "DigiCert Inc",
"ssl_cert_IssuerC": "US",
"ssl_cert_Sub": "a248.e.akamai.net;Akamai Technologies, Inc.;;Cambridge;;Massachusetts;US",
"ssl_cert_SubCN": "a248.e.akamai.net",
"ssl_cert_SubO": "Akamai Technologies, Inc.",
"ssl_cert_SubC": "US",
"ssl_cert_SubP": "Massachusetts",
"ssl_cert_SubL": "Cambridge",
"ssl_cert_SubAltName": "a248.e.akamai.net;*.akamaized.net;*.akamaized-staging.net;*.akamaihd.net;*.akamaihd-staging.net",
"ssl_cert_SerialNum": "0x0d61f7742d583251a2b8d5a26a1dda0b",
"ssl_cert_AgID": "1.2.840.113549.1.1.11",
"ssl_cert_From": "230516000000Z",
"ssl_cert_To": "240515235959Z",
"ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11",
"name": "SSL_RESULT_2"
},
{
"Tuple4": "36.251.161.167.39777>143.92.57.79.443",
"ssl_sni": "a.ywgyuv.cn",
"ssl_ech": "1",
"ssl_client_version": "TLS1.2",
"ssl_ja3_hash": "c3db97da3b30171e5cf9de314584b555",
"name": "SSL_RESULT_3"
}
]