https://bz.apache.org/bugzilla/show_bug.cgi?id=64110
Bug ID: 64110
Summary: Record TLS protocol in access log for connections with
a failed TLS handshake
Product: Tomcat 9
Version: unspecified
Hardware: PC
OS: Mac OS X 10.1
Status: NEW
Severity: enhancement
Priority: P2
Component: Connectors
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: -----
For reference:
https://lists.apache.org/thread.html/r7d872a09a56b539545a226813761ee3c0dcdf75787449dd8551f2f07%40%3Cusers.tomcat.apache.org%3E
When a TLS connection is attempted and failed, Tomcat will record an access log
where the protocol is "-" and the cipher suite is "-" (if specified in the log
string, of course).
In the event of a TLS handshake failure (e.g. no shared cipher suites, protocol
not supported/configured/allowed, insufficient client-cert trust, etc.), the
TLS protocol itself -- as advertised by the client -- should be a known value,
and should be available to the access log instead of "-".
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
