[
https://issues.apache.org/jira/browse/TS-2924?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wei Sun updated TS-2924:
------------------------
Description:
A few old origins cannot support the latest ssl protocols well, ats is expected
to be able to configure dedicated cipher suite and protocols for SSL client
context.
{code}
e.g. Enable SSLv3/TLSv1/TLSv1_1/TLSv1_2
map http://foo1.com https://www.bankadviser.com/scbteod/scbteod_logo.GIF
map http://foo2.com
https://applications.bancopopular.com/images/emails/fb-share-button.jpg
curl -H 'Host: foo1.com' http://localhost:8080/ -v // failed to setup ssl
connection to origin
curl -H 'Host: foo2.com' http://localhost:8080/ -v //SSL connection hang
{code}
was:
A few old origins cannot support the latest ssl protocols well, ats is expected
to be able to configure dedicated cipher suite and protocols for SSL client
context.
{code}
e.g. Enable SSLv3/TLSv1/TLSv1_1/TLSv1_2
map http://foo1.com https://www.bankadviser.com/scbteod/scbteod_logo.GIF
map http://foo2.com https://applications.bancopopular.com/t
curl -H 'Host: foo1.com' http://localhost:8080/ -v // failed to setup ssl
connection to origin
curl -H 'Host: foo2.com' http://localhost:8080/ -v //SSL connection hang
{code}
> Configurable client's ssl protocols and cipher suite
> ----------------------------------------------------
>
> Key: TS-2924
> URL: https://issues.apache.org/jira/browse/TS-2924
> Project: Traffic Server
> Issue Type: Improvement
> Components: SSL
> Reporter: Wei Sun
> Labels: yahoo
>
> A few old origins cannot support the latest ssl protocols well, ats is
> expected to be able to configure dedicated cipher suite and protocols for SSL
> client context.
> {code}
> e.g. Enable SSLv3/TLSv1/TLSv1_1/TLSv1_2
> map http://foo1.com https://www.bankadviser.com/scbteod/scbteod_logo.GIF
> map http://foo2.com
> https://applications.bancopopular.com/images/emails/fb-share-button.jpg
> curl -H 'Host: foo1.com' http://localhost:8080/ -v // failed to setup ssl
> connection to origin
> curl -H 'Host: foo2.com' http://localhost:8080/ -v //SSL connection hang
> {code}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
