5-21
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
Chapter 5 Configuring Back-End SSL
Configuring a Service for Back-End SSL
Activating the SSL Service
Once you configure an SSL proxy list service, use the active command to activate
the service. Activating a service puts it into the resource pool for load-balancing
SSL content requests between the client and the server.
Before activating an SSL service:
• For a virtual SSL server, you must add an SSL proxy list to an ssl-accel type
service before you can activate the service. If no list is configured when you
enter the active command, the CSS logs the following error message and does
not activate the service.
Must add at least one ssl-proxy-list to an ssl-accel type service
• For a back-end SSL server, you must add an SSL proxy list to an
ssl-accel-backend type service before you can activate the service. If no list
is configured when you enter the active command, the CSS logs the following
error message and does not activate the service.
Must add at least one ssl-proxy-list to an ssl-accel type service
• The SSL proxy list added to the service must be active before you can activate
the service. If the list is suspended, the CSS logs the following error message
and does not activate the service.
No ssl-lists on service, service not activated
Once the service is ready to activate, the CSS initiates the transfer of appropriate
SSL configuration data for each SSL proxy list to a specific SSL module and
activates the service. If there is an error in transfer, the CSS logs the appropriate
error and does not activate the service.
No modifications may be made to an active SSL proxy list. If modifications are
necessary, first suspend the ssl service to make changes to the SSL proxy list
entries.
To activate service ssl_serv1, enter:
(config-service[ssl_serv1])# active
To Next Page
Loading...
Need help?
General
