tls: introduce 'cert ready' state

src/app-layer-ssl.c

@@ -235,6 +235,13 @@ int SSLGetAlstateProgress(void *tx, uint8_t direction)
         return TLS_HANDSHAKE_DONE;
     }
 
+    if (direction == STREAM_TOSERVER &&
+        (ssl_state->server_connp.cert0_subject != NULL ||
+         ssl_state->server_connp.cert0_issuerdn != NULL))
+    {
+        return TLS_STATE_CERT_READY;
+    }
+
     return TLS_STATE_IN_PROGRESS;
 }
 

src/app-layer-ssl.h

@@ -59,8 +59,9 @@ enum {
 
 enum {
     TLS_STATE_IN_PROGRESS = 0,
-    TLS_HANDSHAKE_DONE = 1,
-    TLS_STATE_FINISHED = 2
+    TLS_STATE_CERT_READY = 1,
+    TLS_HANDSHAKE_DONE = 2,
+    TLS_STATE_FINISHED = 3
 };
 
 /* Flag to indicate that server will now on send encrypted msgs */