Forum Discussion
Humair_167681
Nimbostratus
NimbostratusiRule to log SSL cipher version
Hi all,
I need to know which of the following iRules would log,
Requested Ciphers Agreed Cipher the fact that a cipher was not agreed, so connection was not allowed.
iRule 1:
when CL...
Kevin_Stewart
Employee
EmployeeTechnically all of these will have access to the agreed upon cipher and version, though semantically only the CLIENTSSL_HANDSHAKE and HTTP_REQUEST events should have the "chosen" cipher. The CLIENTSSL_HANDSHAKE event will only fire once per SSL handshake, while the HTTP_REQUEST event will fire repeatedly throughout the HTTP application.
When you say "requested ciphers", do you really need to see all of the ciphers that the client presents? That is usually a pretty large list. You'd also need to collect this information in a layer 4 (TCP) event.
