For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Yugandhar's avatar
Yugandhar
Icon for Nimbostratus rankNimbostratus
Aug 05, 2020

SSL Commands available for HTTP_REQUESTand CLIENTSSL_HANDSHAKE Event

Hi,

 

Would like to know under which event can we use the following SSL commands

 

SSL::cipher name

SSL::cipher version

SSL::cipher bits

 

I don't see the above commands listed under HTTP_REQUEST and CLIENTSSL_HANDSHAKE REQUEST.

 

https://clouddocs.f5.com/api/irules/HTTP_REQUEST.html

 

https://clouddocs.f5.com/api/irules/CLIENTSSL_HANDSHAKE.html

 

 

Thanks,

Yugandhar.

application delivery
BIG-IP
LTM

1 Reply

  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Icon for MVP rankMVP
    Aug 07, 2020

    Hi Yugandhar,

    You can use this SSL commands in HTTP_REQUEST event.

    Example iRule:

    when HTTP_REQUEST {
	log local0. "cipher=[SSL::cipher name]|version=[SSL::cipher version]|bits=[SSL::cipher bits]"
}

    LTM Logs:

    cipher=ECDHE-RSA-AES128-CBC-SHA|version=TLSv1.1|bits=128