Forum Discussion

gdoyle's avatar
gdoyle
Icon for Cirrostratus rankCirrostratus
May 25, 2016

Use iFile to when only TLS1.0 is being used.

I want to display a custom message to people who are using only TLS1.0 in their browsers as to why they cannot access the website. I used the code below to attempt to do what I wanted after uploading...
BIG-IP
devops
ifiles
irule
tls
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous

Hi,

You should try adding a log in your irule to make sure that you negociate SSL using TLS1.0 

when HTTP_REQUEST {

    log local0. "[virtual] - SSL version=[SSL::cipher version], client_ip=[IP::client_addr]"

    if { not ([SSL::cipher version] starts_with "TLSv1.") } {
        log local0. "[virtual] - SSL version=[SSL::cipher version], client_ip=[IP::client_addr], invalid SSL version"
        HTTP::respond 200 content [ifile get message.html] noserver "Content-Type" "text/html" "Cache-Control" "no-cache, must-revalidate" Connection Close
    }
}
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
May 25, 2016
or using cli, you can execute the following command to get insight live : tailf /var/log/ltm