Skip to content

test: add ECH and ALPS extension tests - #43

Merged
vlvkobal merged 1 commit into
FoxIO-LLC:mainfrom
12189108:main
Jan 22, 2026
Merged

test: add ECH and ALPS extension tests#43
vlvkobal merged 1 commit into
FoxIO-LLC:mainfrom
12189108:main

Conversation

@12189108

Copy link
Copy Markdown

Add integration test to verify ECH (0xfe0d) and ALPS (0x44cd) TLS extensions are correctly captured by the JA4 module. Changes:

  • Add test_ech_alps.py using curl_cffi to impersonate Chrome 136
  • Update test_integration.py to include ech_alps test case
  • Modern Chrome includes both ECH and ALPS extensions natively The test validates that nginx's raw ClientHello parsing correctly captures these extensions and includes them in JA4 fingerprints.

Add integration test to verify ECH (0xfe0d) and ALPS (0x44cd) TLS
extensions are correctly captured by the JA4 module.
Changes:
- Add test_ech_alps.py using curl_cffi to impersonate Chrome 136
- Update test_integration.py to include ech_alps test case
- Modern Chrome includes both ECH and ALPS extensions natively
The test validates that nginx's raw ClientHello parsing correctly
captures these extensions and includes them in JA4 fingerprints.
@vlvkobal
vlvkobal merged commit 8d210cb into FoxIO-LLC:main Jan 22, 2026
1 check passed
@vlvkobal

Copy link
Copy Markdown
Collaborator

Thank you @12189108

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants