Ssl Initiation Proxy List Quick Start - Cisco 11503 - CSS Content Services Switch Configuration Manual

SSL Initiation Proxy List Quick Start

Cisco Content Services Switch SSL Configuration Guide
2-10
The following running-configuration example shows the results of entering the
commands in Table 2-4
server in Table 2-3.
!*********************** SSL PROXY LIST ***********************
ssl-proxy-list ssl_list1
ssl-server 20
ssl-server 20 vip address 192.168.3.6
ssl-server 20 port 444
ssl-server 20 rsacert myrsacert1
ssl-server 20 rsakey myrsakey1
ssl-server 20 cipher rsa-export-with-rc4-40-md5 192.168.3.6 8080
weight 5
ssl-server 20 urlrewrite 22 www.mydomain.com
active
backend-server 1
backend-server 1 ip address 192.168.4.4
backend-server 1 port 8080
backend-server 1 server-ip 192.168.4.4
backend-server 1 server-port 113
backend-server 1 cipher rsa-export-with-rc4-40-md5
active
When you require that a CSS receive clear text from a client and then send
encrypted data to an SSL server, configure an SSL initiation back-end server entry
in the SSL proxy list to allow the SSL module to encrypt the data and initiate an
SSL connection with the server.
Table 2-5 provides an overview of steps required to create an SSL initiation proxy
list.
Chapter 2
in bold and the commands associated with the virtual SSL
SSL Configuration Quick Starts
OL-5655-01