Re: Logging the TLS cipher suite

12 Mar 2016


      Add %k to login_log_format_elements (in conf.d/10-logging.conf)
for example
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
%k session=<%{session}>
On 03/12/2016 12:20 AM, Luigi Rosa wrote:
...
Hi,
could it be possible to log the TLS cipher suite as Postfix does?
This is a typical TLS Dovecot log line:
imap-login: Login: user=<user@acme.com>, method=DIGEST-MD5,
rip=1.2.3.4, lip=4.3.2.1, mpid=19671, TLS, session=<Jsvr46wt2c1ScQfY>
This is the Postfix equivalent
postfix/smtp[59723]: Anonymous TLS connection established to
mail.acmne.com[1.2.3.4]:25: TLSv1.2 with cipher AECDH-AES256-SHA
(256/256 bits)

Re: Logging the TLS cipher suite

Gedalya