SSL Shutdown procedure parameter

[michael.e.reid]

When issuing the 'show ssl-proxy-list <name>' command there is a parameter called 'SSL Shutdown procedure' which is set to NORMAL.

Does this refer to the fact the CSS reboots when the SSL module fails ? If so, can this parameter be changed ?

Thanks, Mike

[Gilles Dufour]

no, this parameter refers to how the ssl module terminates an SSL connection.

openssl calls this operation "shutdown".

The CSS by default uses the default shutdown mode, but you can change it with the command 'ssl-server 10 unclean-shutdown'.

Some version of internet explorer do not like the normal shutdown which is why we have this unclean shutdown.

Regards,

Gilles.