You could running a Qualys SSL test
https://www.ssllabs.com/ssltest/
and look for the browsers which don't use TLS1.2, and compare that to
your logs of user-agent strings.


On 09/17/2015 02:30 PM, Andrew Barringer wrote:
> 
> With the upcoming deprecation of TLS 1.0 & 1.1 for PCI 3.1 compliance we need 
> to know what protocol and cipher suites are being used by our clients. This 
> will give us an indication of what to expect when we have to drop TLS 1.0 & 
> 1.1 support.
> 
> Is there a way to log the SSL_PROTOCOL and SSL_CIPHER with pound as is 
> possible with apaches mod_ssl?
> 
> 
> Thanks,
> Andy
> 
> 
> 
> --
> To unsubscribe send an email with subject unsubscribe to [email protected].
> Please contact [email protected] for questions.
> 

--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

Reply via email to