dennypayne
Oct 21, 2008Employee
Detecting TLS v1.1
Does anyone know what string (if anything) LTM 9.4.x will return for [SSL::cipher version] if the client is using TLS v1.1 (ie Opera)?
I'm trying to account for the possibility of a TLS v1.1 request coming into the following iRule and I haven't yet been able to actually create a v1.1 request to determine what the correct string might be...
Denny
when HTTP_REQUEST {
get encryption strength
set ver [SSL::cipher version]
set strength [SSL::cipher bits]
Is client SSLv3 or TLSv1 and at least 128 bit?
if { ($ver == "SSLv3") or ($ver == "TLSv1") } {
if { $strength < 128 } {
HTTP::redirect "http://www.domain.com/upgradebrowser.html"
}
}
else {
HTTP::redirect "http://www.domain.com/upgradebrowser.html"
}
}