| commit | 769fd2e447487a1433350f727aee47b265d875b0 | [log] [tgz] |
|---|---|---|
| author | Marcin Deranek <marcin.deranek@booking.com> | Mon Jul 12 14:16:55 2021 +0200 |
| committer | Willy Tarreau <w@1wt.eu> | Thu Aug 26 19:48:33 2021 +0200 |
| tree | ddcf5ccab72cc420b3813b291da77874a92bb27a | |
| parent | 5ef965606b5bacb12769c97f85b2cfd1c4e4ffe7 [diff] |
MEDIUM: ssl: Capture more info from Client Hello When we set tune.ssl.capture-cipherlist-size to a non-zero value we are able to capture cipherlist supported by the client. To be able to provide JA3 compatible TLS fingerprinting we need to capture more information from Client Hello message: - SSL Version - SSL Extensions - Elliptic Curves - Elliptic Curve Point Formats This patch allows HAProxy to capture such information and store it for later use.