Troubleshooting Ssl Initiation - Cisco 11503 - CSS Content Services Switch Configuration Manual

Troubleshooting SSL Initiation

Troubleshooting SSL Initiation
Cisco Content Services Switch SSL Configuration Guide
6-30
The following information is designed to assist you in troubleshooting issues that
you may encounter when configuring SSL initiation.
For issues with the SSL proxy list:
Verify that you have configured the back-end server as type initiation. See the
•
"Configuring the Back-End Server as an SSL Initiation Server"
Verify that you have added the SSL proxy list to a service of type ssl-init and
•
you have activated the service. See the
Initiation" section.
Verify that you have added the SSL service to a content rule and you have
•
activated the content rule. See the
Initiation" section.
For issues with client certificates:
Verify that you have configured the client certificate and key on the
•
appropriate back-end server in the SSL proxy list. See the
Client Certificates and Keys"
Verify that you have added the SSL proxy list to a service of the type for
•
which the back-end server will be used. Use the type ssl-init command for
SSL initiation and the type ssl-accel-backend command for back-end SSL.
See the "Configuring a Service for SSL Initiation"
Verify that you have added the SSL service to a content rule and that the
•
content rule is active. See the
section.
Ensure that the SSL server is configured to request a client certificate.
•
Use a sniffer on the back-end connection to verify that the server is requesting
•
a client certificate and that the CSS is sending the certificate.
Chapter 6
"Configuring a Service for SSL
"Configuring a Content Rule for SSL
section.
"Configuring a Content Rule for SSL Initiation"
Configuring SSL Initiation
section.
"Configuring
section.
OL-5655-01