Forum Discussion

Doppler44_23469's avatar
Doppler44_23469
Icon for Nimbostratus rankNimbostratus
10 years ago
Solved

Inject TLS version into HTTP header

I'm planning to disable support for TLS 1.0, but want to give my users some time to update to modern browsers before I pull the plug on older browsers that don't support TLS 1.1 and 1.2. I'd like to ...
http header
irules
security
tls
  • Brad_Parker_139's avatar
    Brad_Parker_139
    10 years ago

    Yep, this should do the trick for you.

    when HTTP_REQUEST {
    HTTP::header insert "tls-version" [SSL::cipher version]
}
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
10 years ago

Yep, this should do the trick for you.

when HTTP_REQUEST {
    HTTP::header insert "tls-version" [SSL::cipher version]
}
Doppler44_23469's avatar
Doppler44_23469
Icon for Nimbostratus rankNimbostratus
10 years ago
That did the trick. The header appears with the appropriate value: "TLSv1", "TLSv1.1", or "TLSv1.2". Thanks again.