Beefy Boxes and Bandwidth Generously Provided by pair Networks
Keep It Simple, Stupid
 
PerlMonks  

Re: Is it possible to check the client's SSL/TSL version?

by Rhandom (Curate)
on Jul 17, 2015 at 01:23 UTC ( [id://1135105]=note: print w/replies, xml ) Need Help??


in reply to Is it possible to check the client's SSL/TSL version?

This is becoming a major issue as any site supporting IE7 and older will begin to fail PCI within the year. So this is an important thing to be able to check.

One way that it could be done is to use multiple IPs or Virtual Hosts, each with SSL enabled, but with each one supporting only one SSL or TLS version. Then use JavaScript on a single page to get an image or script from each of them configured servers. Coalesce the results in JavaScript and report back. Largest cost is the multiple IPs and/or domain names and a bit of time to setup your Apache configs. (You may be able to do this with a Perl daemon, but I'm not aware of many of them that support separate SSL Virtual Host setups).

my @a=qw(random brilliant braindead); print $a[rand(@a)];
  • Comment on Re: Is it possible to check the client's SSL/TSL version?

Replies are listed 'Best First'.
Re^2: Is it possible to check the client's SSL/TSL version?
by Monk::Thomas (Friar) on Jul 17, 2015 at 10:28 UTC

    This is becoming a major issue as any site supporting IE7 and older will begin to fail...

    You make it sound like this is a bad thing.

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://1135105]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others taking refuge in the Monastery: (8)
As of 2024-04-18 06:03 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found