Hi solaris experts, we do have some kind of 'ApplicationServer' that runs on Solaris and does not support ssl on its own and are planning to add a kssl proxy in front of it to make it handle SSL traffic.
Now this ApplicationServer itself also makes calls to the outside, especially LDAP. We need to support LDAPS (against ActiveDirectory) therefore using the same proxy approach with kssl would save us some risky development efford. So can kssl be used to encrypt outbound traffic just like it can be used for inbound traffic? This is possible with tunneling solutions like stunnel. However we would like to avoid the installation of additional software if it works without as well. KSSL especially looks more promising than other solutions because it does support sun's crypto-hardware. This message posted from opensolaris.org