Forum Discussion

Koragg332's avatar
Koragg332
Icon for Altostratus rankAltostratus
May 24, 2022

Capture SSL handshae failure via iRule

Hello all. I would like to ask for help when building iRule for SSL. We are in migration of our service from RSA to ECDSA cipher suite (because of security findings) and I need to log following via ...
devops
security
  • Koragg332's avatar
    Koragg332
    Jun 29, 2022

    For those, who will try find something similar, this is not possible.

    The SSLcommunication will not start from server (LB) side.
    Only the client will try to establish session, but LB will not answer.

    Maaaybe it is possible via capturing TCP packets and somehow decode ... but this is not something I need to play with.

    Bye.

Koragg332's avatar
Koragg332
Icon for Altostratus rankAltostratus
Jun 29, 2022

For those, who will try find something similar, this is not possible.

The SSLcommunication will not start from server (LB) side.
Only the client will try to establish session, but LB will not answer.

Maaaybe it is possible via capturing TCP packets and somehow decode ... but this is not something I need to play with.

Bye.