On Fri, Oct 12, 2012 at 12:53 AM, James Peach <jamespe...@me.com> wrote:

>
> What's your SSL configuration look like? What are your certificates?
>

ssl_multicert.config:

dest_ip=81.167.37.99
ssl_cert_name=/etc/pki/tls/certs/star.webint.example.no.crt
ssl_key_name=/etc/pki/tls/private/star.webint.example.no.key
ssl_ca_name=/etc/pki/tls/certs/star.webint.example.no.ca-bundle
dest_ip=81.167.37.125
ssl_cert_name=/etc/pki/tls/certs/services.example.no.crt
ssl_key_name=/etc/pki/tls/private/STAR.services.example.no.without.passphrase.key
ssl_ca_name=/etc/pki/tls/certs/gd_bundle.crt


records.config:

CONFIG proxy.config.http.server_ports STRING 80:ipv4 80:ipv6
443:ipv4:ssl 443:ipv6:ssl
CONFIG proxy.config.ssl.number.threads INT 0
CONFIG proxy.config.ssl.SSLv2 INT 0
CONFIG proxy.config.ssl.SSLv3 INT 1
CONFIG proxy.config.ssl.TLSv1 INT 1
CONFIG proxy.config.ssl.server.cipher_suite STRING
RC4-SHA:AES128-SHA:DES-CBC3-SHA:AES256-SHA:ALL:!aNULL:!EXP:!LOW:!MD5:!SSLV2:!NULL
CONFIG proxy.config.ssl.server.honor_cipher_order INT 0
CONFIG proxy.config.ssl.compression INT 1
CONFIG proxy.config.ssl.client.certification_level INT 0
CONFIG proxy.config.ssl.server.cert_chain.filename STRING NULL
CONFIG proxy.config.ssl.server.cert.path STRING /etc/pki/tls/certs/
CONFIG proxy.config.ssl.server.private_key.path STRING /etc/pki/tls/private/
CONFIG proxy.config.ssl.CA.cert.filename STRING NULL
CONFIG proxy.config.ssl.CA.cert.path STRING /etc/trafficserver
CONFIG proxy.config.ssl.client.verify.server INT 0
CONFIG proxy.config.ssl.client.cert.filename STRING NULL
CONFIG proxy.config.ssl.client.cert.path STRING /etc/trafficserver
CONFIG proxy.config.ssl.client.private_key.filename STRING NULL
CONFIG proxy.config.ssl.client.private_key.path STRING /etc/trafficserver
CONFIG proxy.config.ssl.client.CA.cert.filename STRING NULL
CONFIG proxy.config.ssl.client.CA.cert.path STRING /etc/trafficserver


  -jf

Reply via email to