diff options
| author | liuxueli <[email protected]> | 2023-06-27 17:05:49 +0800 |
|---|---|---|
| committer | liuxueli <[email protected]> | 2023-06-29 18:10:36 +0800 |
| commit | 3a8041198fcbcbecc4cce524dbcd4f9664e027d5 (patch) | |
| tree | 67b0bf1fb1c5059bfca9ef62db9dd97dcbb9f496 /src/tsg_entry.cpp | |
| parent | 2fda08dc43e8586855e934a11690ff2b78f5bfa7 (diff) | |
TSG-15163,TSG-15711: 支持ech协议作为安全策略条件
Diffstat (limited to 'src/tsg_entry.cpp')
| -rw-r--r-- | src/tsg_entry.cpp | 17 |
1 files changed, 16 insertions, 1 deletions
diff --git a/src/tsg_entry.cpp b/src/tsg_entry.cpp index 57d09cb..37bd5e8 100644 --- a/src/tsg_entry.cpp +++ b/src/tsg_entry.cpp @@ -1420,7 +1420,16 @@ int session_l7_protocol_identify(const struct streaminfo *a_stream, struct sessi srt_process_context->ssl_sni=malloc_copy_string(chello->sni, strlen(chello->sni), a_stream->threadnum); } - srt_process_context->is_esni=(int)chello->is_encrypt_sni; + if(chello->is_encrypt_sni==1) + { + srt_process_context->is_esni=1; + } + + + if(chello->is_encrypt_chello==1) + { + srt_process_context->is_ech=1; + } ssl_chello_free(chello); return 1; @@ -2025,6 +2034,12 @@ size_t session_pending_state_deal(const struct streaminfo *a_stream, struct sess unsigned int protocol_id=tsg_l7_protocol_name2id("ESNI", 4); matched_cnt+=tsg_scan_app_id_policy(a_stream, g_tsg_maat_feather, protocol_id, (srt_process_context->mid), matched_rules+matched_cnt, n_matched_rules-matched_cnt); } + + if(srt_process_context->is_ech) + { + unsigned int protocol_id=tsg_l7_protocol_name2id("ECH", 3); + matched_cnt+=tsg_scan_app_id_policy(a_stream, g_tsg_maat_feather, protocol_id, (srt_process_context->mid), matched_rules+matched_cnt, n_matched_rules-matched_cnt); + } if(srt_process_context->proto==PROTO_HTTP && srt_process_context->http_url!=NULL) { |