Cisco 11503 - CSS Content Services Switch Configuration Guide

Chapter 4 Configuring SSL Termination
Configuring Virtual SSL Servers for an SSL Proxy List
4-34
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
To disable the insertion of the static string in the HTTP header and delete the
string, enter:
(config-ssl-proxy-list[ssl_list1])# no ssl-server 20 http-header
static
Specifying SSL or TLS Version
By default, the SSL version is SSL version 3 and TLS version 1. The SSL module
sends a ClientHello that has an SSL version 3 header with the ClientHello
message set to TLS version 1.
Use the ssl-server number version protocol command to specify the SSL or
Transport Layer Security (TLS) protocol version. The options include:
• ssl-tls - SSL protocol version 3.0 and TLS protocol version 1.0 (default)
• ssl - SSL protocol version 3.0
• tls - TLS protocol version 1.0
For example, to specify SSL version 3.0, enter:
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 version ssl
To reset the SSL version to the default of SSL version 3.0 and TLS version 1.0,
enter:
(config-ssl-proxy-list[ssl_list1])# no ssl-server 20 version
Terminating a Client Connection with a TCP FIN Message Only
Normally, the SSL Close-Notify alert terminates a client connection without an
error. However, some versions of MSIE browsers do not close the connection
upon receiving the Close-Notify alert. The browser may attempt to reuse the
connection even though it appears to be closed to the CSS. Because the CSS
cannot reply to a new request on this connection, the browser may display an
error.

Cisco 11503 - CSS Content Services Switch Specifications

General

Brand	Cisco
Model	11503 - CSS Content Services Switch
Category	Switch
Language	English