I'd like TLS version/cipher logged with "TLS established", so I've cherry-picked these commits to our RE24 installation:
7d6d694 ITS#7683 log tls prot/cipher info 0045e56 ITS#7683 more for tls version/cipher info
Also this looks like it should go with them, though we use OpenSSL:
7a7d941 ITS#7979 MozNSS fix for TLS_PROTOCOL_MIN
Do anyone remember if this is complete, or if any fixups are needed? I've not spotted any more commits, anyway.
--On Monday, January 14, 2019 6:44 PM +0100 Hallvard Breien Furuseth h.b.furuseth@usit.uio.no wrote:
I'd like TLS version/cipher logged with "TLS established", so I've cherry-picked these commits to our RE24 installation:
7d6d694 ITS#7683 log tls prot/cipher info 0045e56 ITS#7683 more for tls version/cipher info
Also this looks like it should go with them, though we use OpenSSL:
7a7d941 ITS#7979 MozNSS fix for TLS_PROTOCOL_MIN
Do anyone remember if this is complete, or if any fixups are needed? I've not spotted any more commits, anyway.
I've used the first two commits in RE24 for several years. The MozNSS one I skipped since it has no impact outside of tls_m.c, which is not used with OpenSSL based builds.
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
On 14.01.2019 18:55, Quanah Gibson-Mount wrote:
--On Monday, January 14, 2019 6:44 PM +0100 Hallvard Breien Furuseth h.b.furuseth@usit.uio.no wrote:
I'd like TLS version/cipher logged with "TLS established", so I've cherry-picked these commits to our RE24 installation:
7d6d694 ITS#7683 log tls prot/cipher info 0045e56 ITS#7683 more for tls version/cipher info (...)
I've used the first two commits in RE24 for several years.
Great, thanks!