SSL Profiles, SSL Parameters and precedence for SSL behavior

SSL Profiles, SSL Parameters and precedence for SSL behavior

book

Article ID: CTX269580

calendar_today

Updated On:

Description

Administrators can edit SSL parameters even though an SSL profile is already bound to vServer. However, the configurations made to SSL parameters will not work, due to the SSL profile taking precedence.

Resolution

When an SSL profile is bound to a vServer, all changes to SSL settings should be made to the SSL profile. Any changes made to the SSL Parameters on the vServer will not take effect due to the bound SSL profile taking precedence. If the SSL profile is unbound from the vServer, then the changes made to the SSL parameters will take effect.

Problem Cause

This behavior is by design to allow Administrators to provide a backup set of SSL settings using SSL parameters in the event and SSL profile is removed from a vServer

 

Additional Information

See SSL Profile Infrastructure  for details about ssl profiles, ssl parameters and precedence.