From c9d9807956a09e5219366abdad39901786a53718 Mon Sep 17 00:00:00 2001
From: Joshua Judson Rosen
Date: Mon, 20 Oct 2014 01:18:48 -0400
Subject: afserver: log which protocol version was accepted by SSL_accept.

---
 src/afserver.c | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/src/afserver.c b/src/afserver.c
index 4c00d26..d769b8a 100644
--- a/src/afserver.c
+++ b/src/afserver.c
@@ -1465,9 +1465,10 @@ main(int argc, char **argv)
                         continue;
                       }
               default: {
-                         aflog(LOG_T_CLIENT, LOG_I_DEBUG,
-                             "realm[%s]: new Client[%s]: ACCEPTED by SSL_accept",
-                             get_realmname(config, j), get_clientname(pointer, k));
+                         aflog(LOG_T_CLIENT, LOG_I_DEBUG, "realm[%s]: new Client[%s]: ACCEPTED by SSL_accept[%s]",
+                               get_realmname(config, j),
+                               get_clientname(pointer, k),
+                               SSL_get_version(SslFd_get_ssl(ConnectClient_get_sslFd(srClientsTable[k]))));
                          ConnectClient_set_state(srClientsTable[k], CONNECTCLIENT_STATE_AUTHORIZING);
                          continue;
                        }
@@ -2145,9 +2146,10 @@ main(int argc, char **argv)
                         continue;
                       }
               default: {
-                         aflog(LOG_T_MANAGE, LOG_I_DEBUG,
-                             "realm[%s]: new Client[%s] (ra): ACCEPTED by SSL_accept",
-                             get_realmname(config, j), get_raclientname(pointer, k));
+                         aflog(LOG_T_MANAGE, LOG_I_DEBUG, "realm[%s]: new Client[%s] (ra): ACCEPTED by SSL_accept[%s]",
+                               get_realmname(config, j),
+                               get_raclientname(pointer, k),
+                               SSL_get_version(SslFd_get_ssl(ConnectClient_get_sslFd(srClientsTable[k]))));
                          ConnectClient_set_state(srRaClientsTable[k], CONNECTCLIENT_STATE_AUTHORIZING);
                          continue;
                        }
-- 
cgit v1.1