0

Is there a way by just looking at the apache logs you can tell if the user-credentials is encrypted or not? Meaning some kind of encryption e.g ssl or plain-text.

Thanks.

0

There is usually no indication in an apache access log that the request was served over https instead of http.

If you want to log the protocol, you can follow the instructions in the accepted answer of this question: https://serverfault.com/questions/359476/how-to-log-the-url-scheme-http-https-in-apache

  • what about the user who logged not using https? – asadz Feb 11 '13 at 21:26
  • I want to alert on someone logging on http protocol? – asadz Feb 11 '13 at 21:28
  • Are you asking about the login process for your site? If you started logging the protocol to your log files, you could see when a user used the url of your login process without https. – Stephen Ostermiller Feb 11 '13 at 21:34
  • how? the answer link you showed only refers to the case when https is used. You saying that activity would be seen in non-http e.g access log. – asadz Feb 11 '13 at 21:36
  • 1
    I don't think I'm understanding what you are asking. It sounds to me that you have a site that supports both http and https and are trying to discover if users are using insecure login. If this isn't correct, please edit your question to clarify. – Stephen Ostermiller Feb 11 '13 at 23:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.