Re: [Pound Mailing List] SSL Protocol and SSL Cipher logging

Xan Charbonnet <[email protected]>
Newsgroups gmane.comp.web.pound.general
Message-ID <[email protected]>
You could running a Qualys SSL test
https://www.ssllabs.com/ssltest/
and look for the browsers which don't use TLS1.2, and compare that to
your logs of user-agent strings.


On 09/17/2015 02:30 PM, Andrew Barringer wrote:
> 
> With the upcoming deprecation of TLS 1.0 & 1.1 for PCI 3.1 compliance we need to know what protocol and cipher suites are being used by our clients. This will give us an indication of what to expect when we have to drop TLS 1.0 & 1.1 support.
> 
> Is there a way to log the SSL_PROTOCOL and SSL_CIPHER with pound as is possible with apaches mod_ssl?
> 
> 
> Thanks,
> Andy
> 
> 
> 
> --
> To unsubscribe send an email with subject unsubscribe to [email protected]
> Please contact [email protected] for questions.
> 

--
To unsubscribe send an email with subject unsubscribe to [email protected]
Please contact [email protected] for questions.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.