Forum Discussion

John_Fretwell_1's avatar
John_Fretwell_1
Historic F5 Account
Apr 25, 2005

Is it possible to insert the client SSL encryption type into the unencrypted server side traffic

I have situation with clientside SSL where clients may use different encryption types (3DES, RC4 etc). The server side traffic is unencrypted. Is it possible using iRules to insert the encyrtion type into the http traffic to inform the server? (v9.05) Many thanks. John.
application delivery
dev
devops
iRules
  • bl0ndie_127134's avatar
    bl0ndie_127134
    Historic F5 Account
    Apr 25, 2005
    Yes, the following SSL rules should do the trick.

     

     

     

    SSL::cipher name - Returns the current SSL cipher name using for format of OpenSSL’s SSL_CIPHER_get_name().

     

     

    SSL::cipher version - Returns the current SSL cipher version using for format of OpenSSL’s SSL_CIPHER_get_version().

     

     

    SSL::cipher bits - Returns the number of secret bits used by the current SSL cipher using for format of OpenSSL’s SSL_CIPHER_get_bits().

     

     

     

    You may also be interested in this posting.

     

    Click here