Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[HAProxy] SSL handshake fail to parse #1262

Open
LaurenceJJones opened this issue Mar 6, 2025 · 1 comment
Open

[HAProxy] SSL handshake fail to parse #1262

LaurenceJJones opened this issue Mar 6, 2025 · 1 comment
Labels
good first issue Good for newcomers

Comments

@LaurenceJJones
Copy link
Contributor

LaurenceJJones commented Mar 6, 2025

Currently the HAProxy parser only parses successful proxied requests, however, a user may also want to create a custom scenario if SSL handshake fails

192.168.1.1:33283 [28/Feb/2025:02:07:51.623] 1_HTTPS_frontend/192.168.5.100:443: SSL handshake failure (error:0A0000C1:SSL routines::no shared cipher)

We wouldnt provide a scenario for this as we wouldnt know if a user wants to act on these types of requests, but a parser that can set a log_type to act on would be good enough for now.

line: 192.168.1.1:33283 [28/Feb/2025:02:07:51.623] 1_HTTPS_frontend/192.168.5.100:443: SSL handshake failure (error:0A0000C1:SSL routines::no shared cipher)
    ├ s00-raw
    |    ├ 🔴 crowdsecurity/syslog-logs
    |    └ 🟢 crowdsecurity/non-syslog (+5 ~8)
    ├ s01-parse
    |    ├ 🔴 crowdsecurity/haproxy-logs
    |    ├ 🔴 crowdsecurity/opnsense-gui-logs
    |    ├ 🔴 firewallservices/pf-logs
    |    ├ 🔴 firewallservices/pf-logs-drop
    |    └ 🔴 crowdsecurity/sshd-logs
    └-------- parser failure 🔴
@LaurenceJJones LaurenceJJones added the good first issue Good for newcomers label Mar 6, 2025
@cookiemonsteruk
Copy link

Subscribed now to the issue, Thank you @LaurenceJJones for raising this on behalf of haproxy users like me.
I will be very happy to provide any additional information or data that could be required,

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue Good for newcomers
Projects
None yet
Development

No branches or pull requests

2 participants