Solved: SSL Termination & Cert Managament on CSS11501 / 11503

yycsandman007 · ‎01-13-2008

Hi there....I have successfully implemented an SSL terminated site on the CSS, and load balanced to backend servers using HTTP. It all works great. This is on an 11501 w/SSL Module.

My question is, how do I add another complete SSL terminated site on the same 11501? When I just tried to duplicate the config for the existing SSL server and modify the required fields, I got an error saying:

%% Can only have one active sslAccel type of service per slot.

It has different certs, different VIP, different services, etc...

Also, after I get this working in our test environment, I will be implementing it in prod on a pair of redundant 11503's w/ SSL Modules. Can the 11503 w/SSL Mod handle more certs and SSL servers etc?

Please advise

Thanks

Sandeep

Gilles Dufour · ‎01-14-2008

Sandeep,

you can have only one ssl-proxy-list as indicated by the message.

But inside the proxy-list you can configure multiple server.

So when you want to add a new "site" you need to add new servers to the proxy-list and reuse the proxy-list in the new content rule.

Gilles.

View solution in original post

Gilles Dufour · ‎01-16-2008

It's the same for all CSS1150x.

Gilles.

View solution in original post

Gilles Dufour · ‎01-14-2008

Sandeep,

you can have only one ssl-proxy-list as indicated by the message.

But inside the proxy-list you can configure multiple server.

So when you want to add a new "site" you need to add new servers to the proxy-list and reuse the proxy-list in the new content rule.

Gilles.

yycsandman007 · ‎01-15-2008

excellent....thanks! Is that the same case also for the 11503?

Sandeep

Gilles Dufour · ‎01-16-2008

It's the same for all CSS1150x.

Gilles.