Issue 7683 - Feature request: write TLS prot/cipher to syslog
Summary: Feature request: write TLS prot/cipher to syslog
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: 2.5.0
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-09-06 22:03 UTC by Michael Ströder
Modified: 2020-10-14 21:04 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description Michael Ströder 2013-09-06 22:03:02 UTC
Full_Name: 
Version: HEAD
OS: 
URL: 
Submission from: (NULL) (79.219.124.115)


For debugging which TLS protocol version and cipher suites were actually
negotiated with several LDAP clients this information would be written to the
syslog message.

Current logging:

conn=1000 fd=12 TLS established tls_ssf=256 ssf=256

Suggestion:

conn=1000 fd=12 TLS established tls_ssf=256 ssf=256 tls_proto=TLSv1.1
tls_cipher=DHE-RSA-AES256-SHA256
Comment 1 Howard Chu 2013-09-07 19:26:49 UTC
michael@stroeder.com wrote:
> Full_Name:
> Version: HEAD
> OS:
> URL:
> Submission from: (NULL) (79.219.124.115)
>
>
> For debugging which TLS protocol version and cipher suites were actually
> negotiated with several LDAP clients this information would be written to the
> syslog message.
>
> Current logging:
>
> conn=1000 fd=12 TLS established tls_ssf=256 ssf=256
>
> Suggestion:
>
> conn=1000 fd=12 TLS established tls_ssf=256 ssf=256 tls_proto=TLSv1.1
> tls_cipher=DHE-RSA-AES256-SHA256
>
>
Added to master. MozNSS version is untested due to absence of PEM support in 
MozNSS. (See https://bugzilla.mozilla.org/show_bug.cgi?id=402712 - whatever 
PEM support that may exist is not of usable quality.)

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 2 Howard Chu 2013-09-07 19:32:39 UTC
changed notes
changed state Open to Test
moved from Incoming to Software Enhancements
Comment 3 OpenLDAP project 2014-08-01 21:04:57 UTC
added in master