Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Decouple stream bypass from TLS encrypted bypass v5 #11886

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

lukashino
Copy link
Contributor

Following up on #11831

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6788

Describe changes:
v5

  • rebased
  • added upgrade section
  • fixed docs - Thanks Juliana
  • SV tests should pass now

v4

  • rebased
  • changed SSH bypass defaults to hopefully be in sync with the previous settings

v3

  • added SSH app-layer option encryption-handling allowing to choose whether to continue inspection on SSH once it turns encrypted
  • added SV tests
  • minor docs updates

SV_BRANCH=OISF/suricata-verify#2078

Lukas Sismis and others added 4 commits October 6, 2024 22:28
Decouple app.protocols.tls.encryption-handling and stream.bypass.
There's no apparent reason why encrypted TLS bypass traffic should
depend on stream bypass, as these are unrelated features.

Ticket: 6788
Copy link

codecov bot commented Oct 6, 2024

Codecov Report

Attention: Patch coverage is 89.28571% with 3 lines in your changes missing coverage. Please review.

Project coverage is 82.57%. Comparing base (3f0512e) to head (a403c81).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #11886      +/-   ##
==========================================
- Coverage   82.61%   82.57%   -0.04%     
==========================================
  Files         912      912              
  Lines      249354   249377      +23     
==========================================
- Hits       205992   205935      -57     
- Misses      43362    43442      +80     
Flag Coverage Δ
fuzzcorpus 60.55% <71.42%> (-0.08%) ⬇️
livemode 18.73% <32.14%> (-0.12%) ⬇️
pcap 44.13% <71.42%> (+0.04%) ⬆️
suricata-verify 62.03% <89.28%> (+0.02%) ⬆️
unittests 58.93% <67.85%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 23001

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants