BTW, I do also have these in my records.config: CONFIG proxy.config.http.server_ports STRING 80:ipv4 80:ipv6 443:ipv4:ssl 443:ipv6:ssl CONFIG proxy.config.ssl.number.threads INT 0 CONFIG proxy.config.ssl.SSLv2 INT 0 CONFIG proxy.config.ssl.SSLv3 INT 1 CONFIG proxy.config.ssl.TLSv1 INT 1 CONFIG proxy.config.ssl.server.cipher_suite STRING RC4-SHA:AES128-SHA:DES-CBC3-SHA:AES256-SHA:ALL:!aNULL:!EXP:!LOW:!MD5:!SSLV2:!NULL CONFIG proxy.config.ssl.server.honor_cipher_order INT 0 CONFIG proxy.config.ssl.compression INT 1 CONFIG proxy.config.ssl.client.certification_level INT 0 CONFIG proxy.config.ssl.server.cert_chain.filename STRING NULL CONFIG proxy.config.ssl.server.cert.path STRING /etc/pki/tls/certs/ CONFIG proxy.config.ssl.server.private_key.path STRING /etc/pki/tls/private/ CONFIG proxy.config.ssl.CA.cert.filename STRING NULL CONFIG proxy.config.ssl.CA.cert.path STRING /etc/trafficserver CONFIG proxy.config.ssl.client.verify.server INT 0 CONFIG proxy.config.ssl.client.cert.filename STRING NULL CONFIG proxy.config.ssl.client.cert.path STRING /etc/trafficserver CONFIG proxy.config.ssl.client.private_key.filename STRING NULL CONFIG proxy.config.ssl.client.private_key.path STRING /etc/trafficserver CONFIG proxy.config.ssl.client.CA.cert.filename STRING NULL CONFIG proxy.config.ssl.client.CA.cert.path STRING /etc/trafficserver
Are some of these maybe not used anymore, making TS-1198 relevant..? Thinking mainly of proxy.config.ssl.server.cert.path and proxy.config.ssl.server.private_key.path which are pointing at directories here.. -jf