[squid-dev] [PATCH] Log SSL Cryptography Parameters

Christos Tsantilas christos at chtsanti.net
Thu Dec 10 17:36:00 UTC 2015


This patch adds the following formatting codes:

   %ssl::>negotiated_version
   The SSL version of the client-to-Squid connection.

   %ssl::<negotiated_version
   The SSL version of the Squid-to-server connection.

   %ssl::>received_hello_version
   The SSL version of the Hello message received from SSL client

   %ssl::<received_hello_version
   The SSL version of the Hello message received from SSL server.

   %ssl::>received_supported_version
   The maximum SSL version supported by the the SSL client.

   %ssl::<received_supported_version
   The maximum SSL version supported by the the SSL server.

   %ssl::>cipher
   The negotiated cipher of the client-to-Squid connection.

   %ssl::<cipher
   The negotiated cipher of the Squid-to-server connection.

These are useful for statistics collection, security reviews, and 
reviews prior to adjusting the list of the allowed SSL protocols and 
ciphers.

This is a Measurement Factory project
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Log-SSL-Cryptography-Parameters-t6.patch
Type: text/x-patch
Size: 55514 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20151210/8f1726f0/attachment-0001.bin>


More information about the squid-dev mailing list