topic SSL module problem on CSS11506 in Application Networking

SSL module problem on CSS11506

julxu — Thu, 24 Jul 2008 05:22:51 GMT

Everytime to do something for ssl-proxy-list, I have to suspend the list, and that make many important applications out of air.

Could anyone advice a better idea to work around this problem?

by the way, if I use sorrypage, does end users can see the sorrypage?

Any comments will be appreciated

Thanks in advance

Syed Iftekhar Ahmed — Thu, 24 Jul 2008 06:02:03 GMT

What code are you running?

7.50+ code supports SSL proxy list modification without suspending a service.

when the list is suspended, active connections continue and new ones

will be accepted, provided that "ssl-server" for those connections is not modified. As for the connections associated with "the modified

ssl-server", existing ones will not be affected, but new ones will not be

allowed until the list is active again.

So if I there are 2 ssl-servers (SrvrA & SrvrB) defined and you want to modify SrvrA,

when you suspend the list, the SrvrB will not be interrupted , including accepting new connections.

Syed Iftekhar Ahmed

julxu — Fri, 25 Jul 2008 04:30:21 GMT

great thanks for the reply.

For the service will be modified, if I use sorrypage in content, is end user will redirect to the sorrypage?

Syed Iftekhar Ahmed — Fri, 25 Jul 2008 05:48:19 GMT

Sorry server only works if the services are in down state.

If services are manually suspended Sorry server will not respond.

If services are suspended CSS assumes that user did it on purpose.

Syed Iftekhar Ahmed