http-equiv="content-type">Kernel SSL proxy is now in Solaris 10 06/06
One of the new features in Solaris 10 06/06 is a kernel-level SSL proxy server. Kais Belgaied and I keep talking about blogging about this feature. But, for various reasons, I didn't get around to it till now :-). In this post, I will cover existing documentation for this feature.
First of all, due to an unfortunate slip up, the ksslcfg(1M) man page
was not delivered in Solaris 10 06/06. But, you can find it
Please note that this man page is for Solaris Express. The only
difference is that one of the CLI options, -h ca_certchain_file, is available only in
services' system administration guide also has a section on this
feature. This guide covers configuring a Sun Java system web server or a Apache
web server to use the kernel SSL proxy.
The Sun blue print article by Ning Sun and Pallab Bhattacharya,
about kernel SSL performance on a T2000 machine. Ning Sun also has an excellent blog entry