]> git.ipfire.org Git - thirdparty/squid.git/commit
Log TLS Cryptography Parameters
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Wed, 23 Dec 2015 10:11:26 +0000 (12:11 +0200)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Wed, 23 Dec 2015 10:11:26 +0000 (12:11 +0200)
commit2bcab8520c9c0b2327549c9c4a619e94176a78a6
treec86d7f82b47f2d987b8576225350eabcb117b113
parent18dd9bfbbf17979b9fd1daf88c130bf1536dfdda
Log TLS Cryptography Parameters

This patch adds the following formatting codes:
  %ssl::>negotiated_version  The TLS version of the client-to-Squid connection.
  %ssl::<negotiated_version  The TLS version of the Squid-to-server connection.
  %ssl::>received_hello_version The TLS version of the Hello message received
                                from TLS client
  %ssl::<received_hello_version The TLS version of the Hello message received
                                from TLS server.
  %ssl::>received_supported_version The maximum TLS version supported by the
                                    the TLS client.
  %ssl::<received_supported_version The maximum TLS version supported by the
                                    the TLS server.
  %ssl::>cipher   The negotiated cipher of the client-to-Squid connection.
  %ssl::<cipher   The negotiated cipher of the Squid-to-server connection.

These are useful for statistics collection, security reviews, and reviews
prior to adjusting the list of the allowed TLS protocols and ciphers.

This is a Measurement Factory project
14 files changed:
src/SquidConfig.h
src/cf.data.pre
src/client_side.cc
src/comm/Connection.cc
src/comm/Connection.h
src/format/ByteCode.h
src/format/Format.cc
src/format/Token.cc
src/security/Makefile.am
src/security/NegotiationHistory.cc [new file with mode: 0644]
src/security/NegotiationHistory.h [new file with mode: 0644]
src/ssl/PeerConnector.cc
src/ssl/bio.cc
src/ssl/bio.h