SERVERSSL_SERVERHELLO

Description

Triggered when the system has received the server’s SSL ServerHello message. Zero or more SSL extensions may be received from the peer at this stage in the SSL handshake.

Examples

when SERVERSSL_SERVERHELLO {
    set ext_count [SSL::extensions count]
    log local0.info "SSL::extensions count = $ext_count"

    for {set i 0} {$i<$ext_count} {incr i} {
        binary scan [SSL::extensions -index $i] S1S1H* ext_type ext_len ext
        set ext_type [expr {$ext_type & 0xffff}]
        set ext_len [expr {$ext_len & 0xffff}]
        log local0.info "SSL extension #[expr {$i + 1}]: (type $ext_type len $ext_len) $ext"
    }
}