Kernel SSL proxy is now in Solaris 10 06/06

Guest Author

Kernel SSL proxy is now in Solaris 10 06/06

One of the new features in Solaris 10 06/06 is a kernel-level SSL proxy server. Kais Belgaied and I keep talking about blogging about this feature. But, for various reasons, I didn't get around to it till now :-). In this post, I will cover existing documentation for this feature.

First of all, due to an unfortunate slip up, the ksslcfg(1M) man page
was not delivered in Solaris 10 06/06. But, you can find it href="http://docs.sun.com/app/docs/doc/819-2240/6n4htdna1?q=ksslcfg&a=view">here.
Please note that this man page is for Solaris Express. The only
difference is that one of the CLI options, -h ca_certchain_file, is available only in
Solaris Express.

The href="http://docs.sun.com/app/docs/doc/816-4555/6maoqui7o?a=view">'network
services' system administration guide also has a section on this
feature. This guide covers configuring a Sun Java system web server or a Apache
web server to use the kernel SSL proxy.

The Sun blue print article by Ning Sun and Pallab Bhattacharya, href="http://www.sun.com/blueprints/0306/819-5782.html">here talks
about kernel SSL performance on a T2000 machine. Ning Sun also has an excellent blog entryhref="http://blogs.sun.com/roller/page/enigma?entry=sun_fire_t2000_and_secure">

Technorati Tag: rel="tag">OpenSolaris

Technorati Tag: rel="tag">Solaris

Be the first to comment

Comments ( 0 )
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.