You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "Leif Hedstrom (JIRA)" <ji...@apache.org> on 2012/10/10 04:44:04 UTC

[jira] [Updated] (TS-1500) ssl_multicert.config specify sslcert per port

     [ https://issues.apache.org/jira/browse/TS-1500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-1500:
------------------------------

    Fix Version/s: 3.3.2
    
> ssl_multicert.config specify sslcert per port
> ---------------------------------------------
>
>                 Key: TS-1500
>                 URL: https://issues.apache.org/jira/browse/TS-1500
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>    Affects Versions: 3.2.0
>            Reporter: Kris Lindgren
>             Fix For: 3.3.2
>
>
> Trying to configure ssl termination on traffic server on a per-port basis(would really like to have per ip/port).  An example of what I am wanting to do is:
>  Inet -> LB ( 1.1.1.1:443 ) -> ATS ( 10.1.0.3:443 ) -> web (10.0.0.2:80 )
>  Inet -> LB ( 1.1.1.2:443 ) -> ATS ( 10.1.0.3:444 ) -> web (10.0.0.3:80 )
>  Inet -> LB ( 1.1.1.3:443 ) -> ATS ( 10.1.0.3:445 ) -> web (10.0.0.4:80 )
> Where in ATS I would then have a config like:
> dest_ip=10.1.0.3:443    ssl_cert_name=one.crt ssl_key_name=one.key
> dest_ip=10.1.0.3:444    ssl_cert_name=two.crt ssl_key_name=two.key
> dest_ip=10.1.0.3:445    ssl_cert_name=three.crt ssl_key_name=three.key
> This way a unique IP is terminated on the LB and the LB just balances a different port on ATS, which handles the ssl termination.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira