Cisco 11503 - CSS Content Services Switch Configuration Manual page 210

Showing SSL Module Statistics
Table 7-11 Field Descriptions for the show ssl statistics Command (continued)
Field
Rehandshake TimerAlloc
failed
Successful client
authentications
Client authentication
failures
Unknown issuer
certificates
Signature unable to
decrypt
Invalid issuer keys
Not yet valid certificate
Expired certificates
Revoked certificate
CRLs not obtained from
host
CRLs obtained but failed
to load
CRLs with invalid
signatures
CRL out of memory error Number of times that the SSL module was out of
Session Cache Statistics
Handshakes Accepted
from Client
Cisco Content Services Switch SSL Configuration Guide
7-22
Chapter 7 Displaying SSL Configuration Information and Statistics
Description
Number of times the SSL module was unable to
allocate the Rehandshake Timer.
Number of times that the CSS successfully
authenticated a client certificate.
Number of times that the CSS could not authenticate
a client certificate.
Number of times that the CSS could not identify the
issuer of a client certificate.
Number of times that the CSS could not decrypt the
signature on a client certificate.
Number of times that the CSS identified an invalid
key of a client certificate.
Number of times that the CSS received a certificate
that had not been validated by a CA at that time.
Number of times that the CSS received a certificate
with an expired time stamp.
Number of times that the CSS received a client
certificate revoked by the issuer.
A timeout occurred when the CSS tried to obtain a
CRL from a host.
The CSS successfully obtained the CRL but the CRL
failed to load.
Number of times that the CSS could not validate the
signer of the CRL with the signer certificate on the
CSS.
memory and could not store the CRL. When a CRL
cannot be stored in memory, all incoming client
authentications will fail.
Number of handshakes that the SSL module
accepted from clients.
OL-5655-01