cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
417
Views
0
Helpful
1
Replies

SSL Shutdown procedure parameter

michael.e.reid
Level 1
Level 1

When issuing the 'show ssl-proxy-list <name>' command there is a parameter called 'SSL Shutdown procedure' which is set to NORMAL.

Does this refer to the fact the CSS reboots when the SSL module fails ? If so, can this parameter be changed ?

Thanks, Mike

1 Reply 1

Gilles Dufour
Cisco Employee
Cisco Employee

no, this parameter refers to how the ssl module terminates an SSL connection.

openssl calls this operation "shutdown".

The CSS by default uses the default shutdown mode, but you can change it with the command 'ssl-server 10 unclean-shutdown'.

Some version of internet explorer do not like the normal shutdown which is why we have this unclean shutdown.

Regards,

Gilles.

Review Cisco Networking for a $25 gift card