protocol ssl backend proxy-san-match enable
Enables the checking of the subject alternative name (SAN) field with the origin server certificate in proxy certificates.
Syntax
[no] protocol ssl backend proxy-san-match enable
Parameters
None
Usage
This command configures the SteelHead to include the SAN fields of proxy certificates when selecting the suitable certificate to use for an SSL server being optimized. By default, only the common name (CN) field is used to match the SSL server. Depending on the set of server certificates you want to optimize, this option can reduce the required number of proxy certificates on the SteelHead.
Please work with Riverbed Technical Support before implementing this command.
Example
amnesiac (config) # protocol ssl backend proxy-san-match enable
Product
SteelHead CX, SteelHead EX, SteelHead-v, SteelHead-c
Related Commands