tree ddcf5ccab72cc420b3813b291da77874a92bb27a
parent 5ef965606b5bacb12769c97f85b2cfd1c4e4ffe7
author Marcin Deranek <marcin.deranek@booking.com> 1626092215 +0200
committer Willy Tarreau <w@1wt.eu> 1630000113 +0200
encoding latin1

MEDIUM: ssl: Capture more info from Client Hello

When we set tune.ssl.capture-cipherlist-size to a non-zero value
we are able to capture cipherlist supported by the client. To be able to
provide JA3 compatible TLS fingerprinting we need to capture more
information from Client Hello message:
- SSL Version
- SSL Extensions
- Elliptic Curves
- Elliptic Curve Point Formats
This patch allows HAProxy to capture such information and store it for
later use.