Opened 9 years ago

#692 new enhancement

Introduce variable to get SSL cipher bits of current connection

Reported by: Marcin Deranek Owned by:
Priority: minor Milestone:
Component: nginx-module Version: 1.7.x
Keywords: ssl Cc:
uname -a:
nginx -V: nginx version: nginx/1.7.6
TLS SNI support enabled
configure arguments: --prefix=/usr --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error_log --pid-path=/run/nginx.pid --lock-path=/run/lock/nginx.lock --with-cc-opt=-I/usr/include --with-ld-opt=-L/usr/lib64 --http-log-path=/var/log/nginx/access_log --http-client-body-temp-path=//var/lib/nginx/tmp/client --http-proxy-temp-path=//var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=//var/lib/nginx/tmp/fastcgi --http-scgi-temp-path=//var/lib/nginx/tmp/scgi --http-uwsgi-temp-path=//var/lib/nginx/tmp/uwsgi --with-ipv6 --with-pcre --with-pcre-jit --without-http_auth_basic_module --without-http_browser_module --without-http_empty_gif_module --without-http_fastcgi_module --without-http_limit_req_module --without-http_limit_conn_module --without-http_map_module --without-http_memcached_module --without-http_referer_module --without-http_scgi_module --without-http_ssi_module --without-http_split_clients_module --without-http_upstream_ip_hash_module --without-http_userid_module --without-http_uwsgi_module --with-http_geoip_module --with-http_gzip_static_module --with-http_realip_module --with-http_stub_status_module --add-module=external_module/ngx_devel_kit-0.2.19 --add-module=external_module/lua-nginx-module-0.9.12 --add-module=external_module/echo-nginx-module-0.56 --with-http_ssl_module --without-mail_imap_module --without-mail_pop3_module --without-mail_smtp_module --user=nginx --group=nginx

Description

Currently it's only possible to see/use SSL protocol ($ssl_protocol) and SSL cipher name ($ssl_cipher). I miss SSL cipher bits. See attached patch (which might require a bit of polishing) which intriduces $ssl_cipher_bits variable which returns the number of secret bits used for $ssl_cipher.

Attachments (1)

ssl_cipher_bits.patch (1.7 KB ) - added by Marcin Deranek 9 years ago.

Download all attachments as: .zip

Change History (1)

by Marcin Deranek, 9 years ago

Attachment: ssl_cipher_bits.patch added
Note: See TracTickets for help on using tickets.