Forum Discussion

madi_56757's avatar
madi_56757
Icon for Nimbostratus rankNimbostratus
Apr 27, 2005

verifying ssl encryption

Hello     Is it possible to verifying in a irule the client encrypton of ssl     The problem is i will configure a VIP to terminate the SSL (443)   and if the encryption gre...
application delivery
dev
devops
iRules
Joe_Pruitt's avatar
Joe_Pruitt
Apr 27, 2005
Sure this is possible. In fact, there's a sample over in CodeShare (Click here) titled

[iRule 9.0] Redirect on weak encryption

Here's how you can do it. 

when HTTP_REQUEST { 
    get encryption strength 
   set strength [SSL::cipher bits] 
   if { $strength >= 128 } { 
     pool web_servers 
   } else { 
      Now use one of the destination commands 
      Either specify a pool 
     pool sorry_servers 
      or to a specific node 
     node 10.10.10.10 
      or redirect to a specific URL 
     HTTP::redirect http://some_address/sorry.html 
   } 
 }