Forum Discussion

Doppler44_23469's avatar
Doppler44_23469
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015
Solved

Inject TLS version into HTTP header

I'm planning to disable support for TLS 1.0, but want to give my users some time to update to modern browsers before I pull the plug on older browsers that don't support TLS 1.1 and 1.2. I'd like to ...
http header
iRules
security
tls
  • Brad_Parker_139's avatar
    Brad_Parker_139
    Nov 18, 2015

    Yep, this should do the trick for you.

    when HTTP_REQUEST {
    HTTP::header insert "tls-version" [SSL::cipher version]
}
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Nov 18, 2015

Yep, this should do the trick for you.

when HTTP_REQUEST {
    HTTP::header insert "tls-version" [SSL::cipher version]
}
  • Doppler44_23469's avatar
    Doppler44_23469
    Icon for Nimbostratus rankNimbostratus
    Nov 18, 2015
    Brad, thank you. That's much simpler than I thought it would be.
  • Doppler44_23469's avatar
    Doppler44_23469
    Icon for Nimbostratus rankNimbostratus
    Nov 18, 2015
    That did the trick. The header appears with the appropriate value: "TLSv1", "TLSv1.1", or "TLSv1.2". Thanks again.