Solved: ssl proxy on ACE

joachim_chan · ‎06-23-2010

Hi, i have currently an ace box acting as a ssl proxy, another box is setup in parallel to do testing with different ips of course. Am i able to do a export the RSA key pairs, and certs out from current box and add into the test box? would there be any implication or imapct on current box? Or is there an easier way to do things? Please advice, many thanx..

litrenta · ‎06-28-2010

you can export the certs and keys from the current box with the crypto export command. Of c

ourse this assumes that when they were imported they were not made non-exportable. You can then import these into

your test box adn use in an ssl proxy there. see:

http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/ssl/guide/certkeys.html

View solution in original post

litrenta · ‎06-28-2010

you can export the certs and keys from the current box with the crypto export command. Of c

ourse this assumes that when they were imported they were not made non-exportable. You can then import these into

your test box adn use in an ssl proxy there. see:

http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/ssl/guide/certkeys.html

joachim_chan · ‎07-07-2010

Thanks, i want to add that changing the ft group id so as to make sure there's no conflict of virtual mac.