Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ACE SSL Rewrite

Hi, Gilles.

I am using ACE to terminate https, the backend server needs send http-302 redirect to http, so I would need ssl redirect to change HTTP://server1.com/xx/yy/zz to HTTPS://server1.com/xx/yy/zz.

But it never works, on the client browser side, seems like ACE only retain the URL path, give me only HTTPS://server1.com/.

I am trying to using the following actlist:

action-list type modify http SSL_ZCS_ACTLIST

ssl url rewrite location "zcs2.*"

what I missed? thanks.

Leo

2 REPLIES

Re: ACE SSL Rewrite

Hi Leo,

Kindly refer to the following URL

regarding your issue:

http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00809c3045.shtml

Need some more information regarding which appliance and which software version you are using to speak more specific regarding your issue.

Hoping to listen soon from you.

Till then

Kind Regards,

Sachinga@hcl.in

Re: ACE SSL Rewrite

HI Leo ,

Kindly try the following command

action-list type modify http urlrewrite

ssl url rewrite location "zcs2.*"

instead of using

action-list type modify http SSL_ZCS_ACTLIST

ssl url rewrite location "zcs2.*"

Because Servers are accepting traffic on port 80. When the server sends a redirect

it is not always sent back to the client as https://.

ACE will rewrite the

location field when it sees http://server1.com/xx/yy/zz and will change it to

https://server1.com/xx/yy/zz before encrypting it back to the client.

157
Views
0
Helpful
2
Replies