diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2010-08-05 01:21:59 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2010-08-05 01:21:59 +0200 |
| commit | 4657b3a42a09c2c94c3fd76f67ccebee690121aa (patch) | |
| tree | c113bc9e1a308ae8d6348148fc50d19d65410635 /src/libtls/tls_peer.c | |
| parent | 289c9ac3d775310dff293496409f44fd3b56b5a9 (diff) | |
| download | strongswan-4657b3a42a09c2c94c3fd76f67ccebee690121aa.tar.bz2 strongswan-4657b3a42a09c2c94c3fd76f67ccebee690121aa.tar.xz | |
log selected TLS version and cipher suite
Diffstat (limited to 'src/libtls/tls_peer.c')
| -rw-r--r-- | src/libtls/tls_peer.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/libtls/tls_peer.c b/src/libtls/tls_peer.c index c87002fc7..dbb0efd51 100644 --- a/src/libtls/tls_peer.c +++ b/src/libtls/tls_peer.c @@ -130,9 +130,12 @@ static status_t process_server_hello(private_tls_peer_t *this, this->tls->set_version(this->tls, version); } suite = cipher; + DBG1(DBG_IKE, "received TLS version: %N", tls_version_names, version); + DBG1(DBG_IKE, "received TLS cipher suite: %N", tls_cipher_suite_names, suite); + if (!this->crypto->select_cipher_suite(this->crypto, &suite, 1)) { - DBG1(DBG_IKE, "received cipher suite inacceptable"); + DBG1(DBG_IKE, "received TLS cipher suite inacceptable"); return FAILED; } this->state = STATE_HELLO_RECEIVED; @@ -370,9 +373,11 @@ static status_t send_client_hello(private_tls_peer_t *this, writer->write_data8(writer, chunk_empty); count = this->crypto->get_cipher_suites(this->crypto, &suite); + DBG2(DBG_IKE, "sending %d TLS cipher suites:", count); writer->write_uint16(writer, count * 2); for (i = 0; i < count; i++) { + DBG2(DBG_IKE, " %N", tls_cipher_suite_names, suite[i]); writer->write_uint16(writer, suite[i]); } /* NULL compression only */ |