Ssl termination for multiple names

trying to configure an additional secure http VIP on a css11503 running webns 7.4
I've defined the second ssl service below:
service ssl_serv2
type ssl-accel
keepalive type none
add ssl-proxy-list list2
slot 2
however when I want to activate the service, I get an error about the slot already being used.
How can I implement a second secure service? I already bought a second cert from Verisign, imported it and activated the list2 ssl-proxy-list.
Is there a limitation of one secure VIP per CSS?
dayo

you can have only one ssl-proxy-list active.
However, you can have multiple server defined inside a proxy-list
ssl-server 1 ....
ssl-server 2 ....
ssl-server n ...
So, you basically need only 1 service pointing to 1 ssl-proxy-list inside which you have all the ssl-server with different vip and reals.
Regards,
Gilles.

Similar Messages

Is it possible to use single ssl certificate for multiple server farm with different FQDN?

Hi
We generated the CSR request for versign secure site pro certificate
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
SSL Certificate for cn=abc.com considering abc.com as our major domain. now we have servers in this domain like www.abc.com, a.abc.com , b.abc.com etc. we installed the verisign certificate and configured ACE-20 accordingly for ssl-proxy and we will use same certificate gerated for abc.com for all servers like www.abc.com , a.abc.com , b.abc.com etc. Now when we are trying to access https//www..abc.com or https://a.abc.com through mozilla , we are able to access the service but we are getting this message in certfucate status " you are connected to abc.com which is run by unknown "
And the same message when trying to access https://www.abc.com from Google Chrome.
"This is probably not the site you are looking for! You attempted to reach www.abc.com, but instead you actually reached a server identifying itself as abc.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of adgate.kfu.edu.sa. You should not proceed"
so i know as this certficate is for cn=abc.com that is why we are getting such errors/status in ssl certficate.
Now my question is
1. Is is possible to remove above errors doing some ssl configuration on ACE?
2. OR we have to go for VerisgnWildcard Secure Site Pro Certificate for CSR generated uisng cn =abc.com to be installed on ACE and will be used for all servers like www.abc.com , a.abc.com etc..
Thanks
Waliullah

If you want to use the same VIP and port number for multiple FQDNs, then you will need to get a wildcard certificate. Currently, if you enter www.abc.com in your browser, that is what the browser expects to see in the certificate. And right now it won't beause your certificate is for abc.com. You need a wildcard cert that will be for something like *.abc.com.
Hope this helps,
Sean

Web Dispatcher with SSL termination for EP

Hi All,
I want to configure SAP Web Dispatcher (installed on windows) for SSL
termination scenario. I did all the configuration steps, SSL Basic,
SSL termination steps without Metadata Exchange scenario.
But , when i am trying to access the portal using "
https://<DispatcherHost>:<Port>/irj/portal", its giving page
can not be displayed error
This is how the profile file of the dispatcher looks like,
profile file **************
Profile generated by sapwebdisp bootstrap
unique instance number
SAPSYSTEM = 2
Accessibility of Message Servers
rdisp/mshost = <portal server>
ms/http_port = 8101
SAP Web Dispatcher Parameter
wdisp/auto_refresh = 120
wdisp/max_servers = 100
wdisp/shm_attach_mode = 6
configuration for large scenario
icm/max_conn = 16384
icm/max_sockets = 16384
icm/req_queue_len = 6000
icm/min_threads = 100
icm/max_threads = 250
mpi/total_size_MB = 500
mpi/max_pipes = 21000
#maximum number of concurrent connections to one server
wdisp/HTTP/max_pooled_con = 2000
wdisp/HTTPS/max_pooled_con = 2000
SAP Web Dispatcher Ports
SAP Web Dispatcher Web Administration
icm/HTTP/admin_0 = PREFIX=/sap/wdisp/admin,DOCROOT=./admin
icm/server_port_0 = PROT=HTTPS,PORT=5000
icm/server_port_1 = PROT=HTTP,PORT=0
icm/HTTPS/verify_client = 0
DIR_INSTANCE=D:\SAP_SSL\secudir
ssl/ssl_lib=D:\SAP_SSL\secudir\sapcrypto.dll
sss/server_pse=D:\SAP_SSL\secudir\SAPSSL.pse
wdisp/ssl_encrypt = 0
wdisp/add_client_protocol_header = true
profile file **************
After modifying the profile file, restarting the dispatcher gives the
following information in the command prompt,
Information in command prompt *******
D:\SAP_SSL\sapwebdisp\sapwebdisp pf=sapwebdisp.pfl
**Warning: Could not start service 5000 for protocol HTTPS on host
<hostname>" <on all adapters>
*SAP Web Dispatcher up and operational <pid: 1700>*
Information in command prompt *******
What may be problem? Did i miss out any steps ?
Please help !
Regards,
Sandip

Hi Sandip,
Please check this thread..
/thread/41459 [original link is broken]
cheers,
Prashanth
P.S : Please mark helpful answers

SSL certificates for multiple websites

I am having problems with websites recognizing the SSL certificate assigned to said site. For example, I have three secure websites; (1) x.abc.com, (2) y.abc.com, and (3) z.abc.com. All are setup for SSL with associated SSL certificates from a signed authority. However, when I browse to said sites, I receive an SSL mismatch error pertaining to the domain name. For whatever reason, two of the sites want to use the main site SSL certificate.
I have verified that the sites are setup correctly with the proper SSL certificate and restarted web services. Any ideas?
Thanks!

You do this by IP Aliasing the machine
Oh, you were referring to IP Aliases. Sorry. I interpreted your comment as meaning Server Aliases within Apache (where multiple hostnames map to the same virtual host configuration).
My bad.
So we're both right - you need multiple IP addresses on your server (either by duplicating the inteface in System Preferences, or through IPAliases.conf) and you need to bind one SSL site to each IP address (although you could also use different port numbers on the same IP address in Apache).
If you're using NAT you still need multiple public IP addresses that forward to each of the IP Aliases (or virtual hosts).

OHS - Webserver SSL Termination for EPM

Gurus,
Could you please help me with the instructions to setting up the EPM environment as SSL (web server termiantion at OHS.)
I am done wih the installing an configuring all of the EPM products and now I need to enable the SSL at OHS.
I have reviewed the document but I am getting confused with all kind of setups. Do you have any detailed steps or point to me something ( other than Oracle documentation )?
Thank you in advance !
Edited by: 945478 on Aug 9, 2012 5:24 AM

Hello,
Check this URL, I have uploaded a document which can help you with terminating SSL at web server.
http://www.scribd.com/doc/102533508/Implementation-Steps
Thanks.

CSS11500 SSL handling question for multiple url/FQDNs with the same ip address

I know that it's possible on the CSS to handle multiple incoming HTTP requests that terminate on the same IP address and port and balance them to various servers based on the url. For instance, I can set up www.cats.com and www.dogs.com at the same 192.168.35.12 address in DNS, and set up two different content rules:
content cats
vip address 192.168.35.12
port 80
url "//www.cats.com/*"
add server cats1
add server cats2
active
content dogs
vip 192.168.35.12
port 80
url "//www.dogs.com/*"
add server dogs1
add server dogs2
active.
Easy and straightforward.
But what if I want to add SSL handling for https://www.cats.com and https://www.dogs.com?
I'm not sure how to create the ssl-proxy-list where one content rule (ip address/port) combination needs to pass through the ssl module and get matched with the proper ssl certificate.
Can this be done? Can one associate multiple certs and keys with a single ssl-server entry and a single ssl accelerator service? Or do I have to create multiple ssl-proxy-lists for cats and dogs and build multiple ssl services each referring to a unique ssl-proxy-list, and then use the url parameter in the https content rule to determine which ssl service (and therefore which key/cert pair) gets the traffic?
Thanks in advance for any insights.

Hi Tim,
Unfortunately this is not possible; you can't associate multiple certificates to a single proxy list due to the fact that SSL handshake is done first with no visibility of the URL being requested, so the CSS won't know which public server to use in order to perform the traffic decryption.
But there are a couple of options that you may want to look at (depending on the URL string)
If your URLs are subdomains and you hold a wildcard SSL certficate to match multiple requests, i.e your domain being "pets.com" you can have a certficate that will match request for dogs.pets.com or cats.pets.com because the cert will be in the form *.pets.com
The second option is SAN (Subject alternative names) certificates; which give you the option to include up to 4 flavors of the domain within the same file, such as pets.com, pets.net, www.1pets.com.
I hope this helps.
Pablo

Multiple SSL terminations - 1 CSS11506

Well the questions keep coming.
Can anyone point me in the right direction for setting up multiple SSL terminations, 443 port for them all and multiple VIPS. So far I have one SSL site working but when i try to make my 2nd ssl proxy list active it says only one active at a time. So looking for sample configs to make this happen.
Cheers
Dave

Thanks man, I read up a bit more and figured that out..Here is my config so far...
ssl associate rsakey myrsakey1 CSSrsakey1
ssl associate cert myrsacert1 CSScertfile1
ssl associate rsakey myrsakey2 CSSrsakey2
ssl associate cert myrsacert2 CSScertfile2
ip route 0.0.0.0 0.0.0.0 192.168.20.1 1
!************************** CIRCUIT **************************
circuit VLAN1
ip address 192.168.20.20 255.255.255.0
!*********************** SSL PROXY LIST ***********************
ssl-proxy-list ssl-list
ssl-server 90
ssl-server 90 vip address 192.168.20.100
ssl-server 90 cipher rsa-with-des-cbc-sha 192.168.20.50 80
ssl-server 90 cipher rsa-with-3des-ede-cbc-sha 192.168.20.50 80
ssl-server 90 cipher rsa-with-rc4-128-sha 192.168.20.50 80
ssl-server 90 cipher rsa-with-rc4-128-md5 192.168.20.50 80
ssl-server 90 rsacert myrsacert1
ssl-server 90 rsakey myrsakey1
ssl-server 90 urlrewrite 22 www.test.com
ssl-server 91
ssl-server 91 vip address 192.168.20.101
ssl-server 91 cipher rsa-with-des-cbc-sha 192.168.20.60 80
ssl-server 91 cipher rsa-with-3des-ede-cbc-sha 192.168.20.60 80
ssl-server 91 cipher rsa-with-rc4-128-sha 192.168.20.60 80
ssl-server 91 cipher rsa-with-rc4-128-md5 192.168.20.60 80
ssl-server 91 rsacert myrsacert2
ssl-server 91 rsakey myrsakey2
ssl-server 91 urlrewrite 23 www.test1.com
active
!************************** SERVICE **************************
service SSLWWW
type ssl-accel
slot 6
keepalive type none
add ssl-proxy-list ssl-list
active
service rprox1
ip address 192.168.20.50
protocol tcp
port 80
active
service rprox2
ip address 192.168.20.60
protocol tcp
port 80
active
!*************************** OWNER ***************************
owner CMPA
content HTTP_rule
protocol tcp
add service rprox1
port 80
url "//www.test.com/*"
vip address 192.168.20.100
content SSLrule2
protocol tcp
vip address 192.168.20.101
application ssl
add service SSLWWW
port 443
active
content ssl
vip address 192.168.20.100
application ssl
add service SSLWWW
port 443
protocol tcp
active

Multiple Names for sender account?

Is it possible to have multiple sender 'names' on a single account.
For example:
I would like to have a personal 'name' for emailing friends...
johnsy <[email protected]>
and for emailing clients etc...
a.johns <[email protected]>
I've figured out how to add multiple addresses to one account, but not multiple names.
Can this be done?

Guess not.

Highly frustrated with Outlook 2013 Search People box bugs - Multiple Name Results for Same Contact & Inconsistent Results

The Outlook 2013 "Search People" box does not function properly. It frequently displays incorrect results or a mess of duplicate results. I've reported previous issues about this and consolidating my posts into one (with screenshots this
time). Hopefully this message will be forwarded to or seen by the Outlook programmers. It really needs to be fixed.
Outlook 2010 and other prior versions worked perfectly. You search for name, you get ONE result with the info you're looking for. FAST AND EASY. But with Outlook 2013 Microsoft has created a heck of a mess resulting in huge frustration and productivity loss
with such simple but important tasks.
I have hundreds of contacts stored in my Outlook address book, and they all have COMPLETE contact info added.
One major issue that I'm experiencing in the new Outlook 2013 is that I now get average of 4 or more duplicate name results appearing for the same contact. And each result contains different and incomplete contact info, making it impossible for me to quickly
find the basic info I'm looking for. The cause of this issue is that Outlook 2013 now provides results from not only your local address book(s), but it also shows results based on your email history and social media accounts setup.
And there's no way to turn this off, or at least specify what folders and/or accounts the People Search box should use.
To make matters worse, the Microsoft developers conveniently forgot to add some form of an indicator (like a small icon besides each name result in the list) that clearly indicates what result is from what source. So you must manually click on each
result one at a time and repeat the search until you locate the correct one.
For one specific example, I have a contact stored in my local address book called
Infusionsoft. When I type "Infusionsoft" in the People Search box to quickly find a phone number, Outlook 2013 shows me 7 results with the same name. See the screenshot below:
As you can see in the screenshot above, every result just says "Infusionsoft", so I have to manually click on each name result one at a time and repeat the process until I find the correct one from my address book. This same thing happens with other
random contacts.
From what I can tell, Outlook is pulling results based on based on recent emails I've received from different people with "@infusionsoft.com" in their email address. So the first result shows "[email protected]" (just the email
address), the second result shows "[email protected]", the third result shows "[email protected]" and so forth. I don't want Outlook to show all of that. I just want what's in my address book!
And you would think that the last result would be the correct one from my address book, but no. Sometimes its the 5th result, and other times it's the 3rd or 7th result. So there's no freaking order of things here.
We simply need the ability to turn off searching of email history and other accounts when using the People Search box. Problem fixed.
(And please don't tell me that I need to "link" every incorrect result to one main contact. You shouldn't expect everyone to have to tediously link any and all results that appear to a record. ESPECIALLY when 5+ results for each contact appear regularly.)
ISSUE 2: Some names must be typed in a different way for the Search People to locate them
Another big issue I'm having with the Search People box is that some name searches don’t show the correct result, unless I search for their names in a different way.
For one specific example, I have a contact stored in my address book named "Dave Johnson". When I type "Dave Johnson" in the Search People box, one result appears, but it's just his email address, only. It's not the result that's stored in my Outlook address
book with his phone number, addresses, etc. Screen shot below:
If I type in Dave's name reverse order (Johnson Dave), no results are found at all.
Now if I just type in just"Johnson" all by itself, it finds Dave's correct result (the one stored in my Outlook Address Book). Along with everybody else that has "Johnson" in their name (see screenshot below)...
I double-checked how I have Dave's name programed in my address book, and it's in there as "Dave Johnson" for both the Full Name and File As fields.
Also, the name order shouldn't make any difference when using the People Search Box anyway. Sometimes I can find people by Last Name, First Name or First Name, Last Name. Only with random contacts does it get difficult finding their info and
I have to do strange things like this to find them from the People Search box.
ISSUE 3: Some Search People results only yield an email address only.
For other random contacts, some search results only yield an email address with no other contact details. But I can open the persons contact card from the address book manually, with the same email address shown! Screenshot below...
In the screenshot above, I have outlined the Search People box results in red, and the Address Book results in green. You can clearly see that "Robert White" is a contact stored in my local address book with full contact details, but the Search People result
only shows his email address! Again, it's not consitent. It's hit or miss with different people.
ISSUE 4: Some results just don't appear at all, but they are in the address book
Another issue I'm experiencing with the People Search Box is that some people simply cannot be found. But I can see their contact info just fine if I click on the "People" tab down at the bottom of the page and type in their name in the "Search Contacts"
field. Why can't the People Search box find certain people? I opened up their contact details and cannot find a single thing that would prevent them from showing up in results.
These are clearly serious bugs that need to be fixed. And I'm shocked as to how this got missed--or ignored during alpha and beta testing. I see the "idea" behind the developers having the Search People box search everything outside of the
address book, but in real world application this causes a heck of a lot of problems & confusion, and it needs to be fixed ASAP.
For technical details, I have Outlook 2013 running on two computers using hosted Exchange 2010. One system is Windows 7 and other is Windows 8. The same problems occur on BOTH computers. As far as my Outlook account setup, I have all contacts stored in the
main address book (no sub-folders or other folders).
Can someone help communicate this message to the Outlook developers??? The "Frown" button limits me to 100 characters and one image. There's no way I can communicate this level of detail and steps to duplicate in 100 characters!

Thanks for your reply.
1) The instant search boxes in each individual page work just fine. If I am on the People page and type in a name in the "Search Contacts" field, it searches my contacts and displays the results that I want. But I should not have to leave whatever screen
I'm in to find people now. In Outlook 2010 and earlier versions, I could be on the calendar page and then search for a contact without clicking off the calendar completely. For productivity-sake, it's a huge waste of time and hassle now.
2) I'm familiar with how contact linking works, and quite frankly it's a huge mess in general. I NEVER create multiple contacts for the same person. I get that Outlook 2013 get confused now when it detects a LinkedIn or Facebook account for the same person
already in my Outlook address book, but we need to have options that allow us to turn off results from some or all social networks. This is a big part of the problem.
Think about it this way - The average person has 150+ LinkedIn connections, and more for Facebook. Many people today have accounts for both and they are setup with the same email address. When Outlook 2013 has to scan all the networks IN ADDITION to your
local address book(s), it's a no brainer that it can get very confused trying to display results.
Another big part of the problem is that Outlooks new search system also scans your email history. I receive emails from people who use multiple email addresses, or emails from companies with multiple reps or ticket systems that send you a unique
ticket ID # ending in the same email address domain. Now Outlook displays people search results based on everything under the sun in my email history. This is beyond frustrating (see my "Infusionsoft" screenshot above in the first post).
Again, I want to stress that for the search examples I referenced, I only have one entry in my Outlook address book for each person. And that's all I want to find when I search for people--what's already in my own address book!
In summary:
We need an OPTION to turn off searching external networks when using the People Search box
We need an option to tell Outlook to not scan email history for people search results (I think this needs to be disabled entirely actually. It's not helpful at all)
There should be a fixed priority for displaying people search results, with local address book results FIRST, followed by social network results.
There should be a clear icon/indicator next to each result that gives you a clue as to where the result is coming from. Your address book? Facebook? LinkedIn? We should not need to click on each result to get a hint as to where it's coming from.
Work out the bugs in general with the new search system.
One other thing that I didn't mention is that the Search People box also shows results for people I'm not even "friends" or connected with on the different social networks. But I've noticed that some people use the same email address for those networks that
I already have programmed for them in my address book, which is why Outlook sometimes shows me these results. Does that make sense?
I'll try rebuilding the index, but after testing Outlook 2013 on 3 different machines so far and seeing the same results (all slightly different results on each machine and very inconsistent), I doubt this will address the issue.

Is it possible to search for multiple folders with the same name and...

Is it possible to search for multiple folders with the same name and then select them all and change the permissions on just those folders .i.e. Search for the budget folders in all client folders and lock them down to just the project managers. Without having to go to each folder and apply the permissions.

user11919409 wrote:
Is it possible to create a Clone database with the same name of source db using RMAN ...
yes
>
DB version is 11.2.0.2
Is it possible to clone a 11.2.0.2 database to 11.2.0.3 home location directly on a new server . If it starts in a upgrade mode , it is ok ....yes
Handle:     user11919409
Status Level:     Newbie (10)
Registered:     Dec 7, 2009
Total Posts:     102
Total Questions:     28 (22 unresolved)
why do you waste time here when you rarely get any answers to your questions?

How can i search for multiple file names (images) in bridge?

Hello everyone!
Does anyone know how to search for multiple file names in bridge?
That is to copy & paste something like this: _MG_2152, _MG_2177, _MG_2194, _MG_2195, _MG_2202, _MG_2212, _MG_2219, _MG_2261, _MG_2362, _MG_2401
Not using several criterias in the search box that is. That takes too long.
Thanks
Steffen Rikenberg Photographer
Oslo, Norway.
www.steffenrikenberg.no

Try this add-on [https://addons.mozilla.org/it/firefox/addon/find-all/ Find All]

How do I get vendor name in FBL1N for multiple vendors

Hi gurus. When I run FBL1N for a single vendor, the vendor name shows up. If I run FBL1N for multiple vendors, the list is subtotaled by vendor number, but the name goes away. How can I get the vendor name show up when the list is for multiple vendors?
Thanks
Janet

Well, we'll just have to deal with the header data. It is REALLY strange to me that NAME1 is a field you can choose in this report but not in FBL1N.
By the way, we try very hard to give our users a usable solution so that they don't have to download to excel. However, SAP doesn't always cooperate...... : (
Thanks again for your help today. You have solved my problem.

On my contact list I have multiple names for one person

On my contact list I have multiple names for one person.

The Account Owner can see the call/text logs for all lines on the account, but each line needs its own My Verizon account for messaging and backups. Those lines will be listed as Account Members and will have limited info. available to them regarding the account.

Multiple names for sender account "Aaron Johns"

I couldn't reply to your original message because you marked it answered!
But to do what you asked, since you all ready have multiple names when you click on open "New" compose message you'll find at top under header's list,
Account you should see highlighted up & down arrows.
Click on them this should then bring your list of names.
OS-X 10.4.8 "silly they haven't updated the OS tab!

I couldn't reply to your original message because you
marked it answered!
But to do what you asked, since you all ready have
multiple names when you click on open "New" compose
message you'll find at top under header's list,
Account you should see highlighted up & down arrows.
Click on them this should then bring your list of
names.
Slight grammar oddities aside (no offense intended!), this may have just saved me from abandoning Mail.app. I've been using Entourage for years but decided it was time to switch. I waited patiently for about 8 hours as Mail imported all my messages and folders (mailboxes). Then came the fun part of manually duplicating my various accounts. In Entourage, I have about 7 or 8 different accounts for the very purpose of being able to have a different name or reply address. Many of these accounts us the same incoming server info (POP).
The first time I tried to create a new account in Mail with a duplicate POP server and password, it stopped me and informed me this could not be done.
I figured this to be a limitation of Mail - and one that could not live with. But if you're saying I can have multiple names to choose from when sending a message, this may solve the problem. A couple of questions:
Precisely where do I add my list of optional sender names?
Can I attribute a different reply to address as well as a different name to an outgoing message?
Ooh... thought of one more...
Can I have certain "from" addresses linked to certain names and vise-versa?
I'll play with Mail a bit and see if I come with anything. In the meantime, any help is much appreciated.
Now... when is Mail going to allow me to apply "labels" to messages much like Entourage's categories?
Thanks!
Darin
Your humble crooner
PowerMac G5 DP 2.7 Mac OS X (10.4.7) Once you go three-way (monitors, that is), you never go back.

Terminal profiles for multiple shells

I'm a Unix geek, and in prior versions of OS X I've had profiles set up in Terminal.app to run with multiple shells, aside from just the default shell associated with my user account. So, for instance, I have profiles named Bash, Ksh, and Zsh, that run those as login shells ... or at least I did until Yosemite.
The profile options in Terminal.app have changed in Yosemite, specifically with the removal of the option to run a non-default login shell. I could get around that with /usr/bin/login -f <username> /bin/<othershell> [-l], but in the case of /bin/ksh, at least, I haven't been able to find a command line that will invoke ksh directly as a login shell and source /etc/profile.
If I leave the "run inside shell" checkbox checked, I can use the command exec /bin/ksh -l and have /etc/profile sourced, but of course I get the remnants of the bash environment in my exec'd shell.
What magic incantations can I use to just get Terminal profiles to work again for multiple login shells?

Hi,
If your project is running in all company codes then you create a single Project Profile and dont default company code and Plant ,while creating the WBSE enter the company code and Plant for that WBSE.
Else if you have separate projects in company codes then create 15 Project profile /Company code and default the company code in Project Profile.
Thanks,
Muzamil

Ssl termination for multiple names

Similar Messages

Maybe you are looking for