logging connection ciphers?

[Krause, Kilian]

Hi,

to evaluate which of our clients still use certain weaker ciphers for our InfoSec folks, we'd like to log the TLS connection parameters for each 802.1x EAP request.

Is there any option we could enable or does FreeRADIUS not permit to directly log the negotiated cipher and other internal TLS parameters?

Thanks for any pointers.

Best,
Kilian