From 93d17f6f5a116854fa05f5ef55b18baea9ca987b Mon Sep 17 00:00:00 2001 From: liuxueli Date: Sat, 14 Sep 2024 16:26:34 +0800 Subject: Feature: Support calculating JA4/JA4S fingerprint --- test/ssl_test_plug.cpp | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) (limited to 'test/ssl_test_plug.cpp') diff --git a/test/ssl_test_plug.cpp b/test/ssl_test_plug.cpp index 0d3b071..ec2ceec 100644 --- a/test/ssl_test_plug.cpp +++ b/test/ssl_test_plug.cpp @@ -100,15 +100,24 @@ extern "C" unsigned char SSL_TEST_PLUG_ENTRY(stSessionInfo *session_info, void * cJSON_AddStringToObject(ctx, "ssl_client_version", ssl_get_version_name(a_ssl->chello->version)); } - if(strlen(a_ssl->chello->ja3.md5) >0 && a_ssl->chello->ja3.md5_len > 0) + if(strlen(a_ssl->chello->ja3.value) >0) { - cJSON_AddStringToObject(ctx, "ssl_ja3_hash", a_ssl->chello->ja3.md5); + cJSON_AddStringToObject(ctx, "ssl_ja3_hash", a_ssl->chello->ja3.value); + } + + if(strlen(a_ssl->chello->ja4.value) >0) + { + cJSON_AddStringToObject(ctx, "ssl_ja4_hash", a_ssl->chello->ja4.value); } break; case SSL_SERVER_HELLO: - if (a_ssl->shello->ja3s.md5 != NULL && a_ssl->shello->ja3s.md5_len > 0) + if(strlen(a_ssl->shello->ja3s.value) >0) + { + cJSON_AddStringToObject(ctx, "ssl_ja3s_hash", a_ssl->shello->ja3s.value); + } + if(strlen(a_ssl->shello->ja4s.value) >0) { - cJSON_AddStringToObject(ctx, "ssl_ja3s_hash", a_ssl->shello->ja3s.md5); + cJSON_AddStringToObject(ctx, "ssl_ja4s_hash", a_ssl->shello->ja4s.value); } break; case SSL_CERTIFICATE_DETAIL: -- cgit v1.2.3