Is posibble to log the TLS version of an Https Request on asp mvc web application? RSS

• • Reply
  iianma

  None

  0 Points

  1 Post

  Is posibble to log the TLS version of an Https Request on asp mvc web application?

  Jul 29, 2020 10:34 AM|iianma|LINK

  I  need to know if there is an easy way to get the SSL/TLS version that is being used in HtppRequest.

  I have tried to get if there is a property or if i can get the raw data (the info about the connection), but I didn't find anything.

  I need to log the Tls or ssl version that was negotiated during HandShake.

  Thank you!

• • Reply
  mgebhard

  All-Star

  53001 Points

  23587 Posts

  Re: Is posibble to log the TLS version of an Https Request on asp mvc web application?

  Jul 29, 2020 12:02 PM|mgebhard|LINK

  First link in a Google search "get client tls version iis" found.

  https://www.microsoft.com/security/blog/2017/09/07/new-iis-functionality-to-help-identify-weak-tls-usage/

• • Reply
  PatriceSc

  All-Star

  48490 Points

  18071 Posts

  Re: Is posibble to log the TLS version of an Https Request on asp mvc web application?

  Jul 29, 2020 12:12 PM|PatriceSc|LINK

  Hi,

  Try to show which value you have for Request.ServerVariables("CRYPT_PROTOCOL").

  See :
  - https://docs.microsoft.com/en-us/iis/web-dev-reference/server-variables and scroll down to this variable
  - https://www.microsoft.com/security/blog/2017/09/07/new-iis-functionality-to-help-identify-weak-tls-usage/