Forum Discussion

Doppler44_23469's avatar
Doppler44_23469
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015
Solved

Inject TLS version into HTTP header

I'm planning to disable support for TLS 1.0, but want to give my users some time to update to modern browsers before I pull the plug on older browsers that don't support TLS 1.1 and 1.2. I'd like to display a message ("It's time to upgrade your browser") in my web app for customers who negotiate a TLS 1.0 connection.

 

Is it possible to inject an HTTP header (say "tls-version") into the browser's request?

 

http header
iRules
security
tls
  • Brad_Parker_139's avatar
    Brad_Parker_139
    Nov 18, 2015

    Yep, this should do the trick for you.

    when HTTP_REQUEST {
    HTTP::header insert "tls-version" [SSL::cipher version]
}

7 Replies

Sort By
  • Brad_Parker_139's avatar
    Brad_Parker_139
    Icon for Nacreous rankNacreous
    Nov 18, 2015

    Yep, this should do the trick for you.

    when HTTP_REQUEST {
    HTTP::header insert "tls-version" [SSL::cipher version]
}
    • Doppler44_23469's avatar
      Doppler44_23469
      Icon for Nimbostratus rankNimbostratus
      Nov 18, 2015
      That did the trick. The header appears with the appropriate value: "TLSv1", "TLSv1.1", or "TLSv1.2". Thanks again.
  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Nov 18, 2015

    Yep, this should do the trick for you.

    when HTTP_REQUEST {
    HTTP::header insert "tls-version" [SSL::cipher version]
}
    • Doppler44_23469's avatar
      Doppler44_23469
      Icon for Nimbostratus rankNimbostratus
      Nov 18, 2015
      That did the trick. The header appears with the appropriate value: "TLSv1", "TLSv1.1", or "TLSv1.2". Thanks again.