Filter
Top Products
ServerIron ADX Security Guide 189
53-1002440-03
SSL debug and troubleshooting commands
6
Displaying proxy statistics
Use the show cp statistics command in the rconsole mode to display connection proxy statistics, as
shown in the following.
Syntax: show cp statistics
Displaying authentication statistics
Use the show ssl authentication-stats command in rconsole mode to display authentication
statistics about certificate verification on the ServerIron ADX. This information is relevant either in
the case of client certificate verification (on the client side), or while doing SSL proxy (on the server
side).
Syntax: show ssl authentication-stats
ServerIronADX# rconsole 1 1
ServerIronADX1/1# show cp statistics
Client-side counters:
SSL conn established : 24190 SSL handshake done : 17630
TCP conn established : 0 data rx : 17589
rx blocked : 17589 rx unblocked : 13443
save data (await srv con) : 17259
data tx done : 13394 no tx data to send : 730
data tx pending : 13394 ready to tx data : 13394
data mv pending : 0 data mv done : 0
closed conn : 19941 remote closed conn : 20044
RST rcvd : 0 RST sent : 4265
conn close complete : 19925 sock error or timeout : 0
Server-side counters:
conn established : 13811 data rx : 13497
rx blocked : 13394 rx unblocked : 13394
data tx done : 13430 no tx data to send : 0
data tx pending : 13408 ready to tx data : 13430
data mv pending : 0 data mv done : 0
closed conn : 20034 remote closed conn : 15261
RST rcvd : 49 RST sent : 3500
conn close complete : 18989 sock error or timeout : 1652
ServerIronADX# rconsole 1 1
ServerIronADX1/1# show ssl authentication-stats
SSL certificate verification counters:
Success : 18384 Failure : 0
Unknown user : 0 Signature failed : 0
Certificate expired : 0 Certificate revoked : 0
Cert not yet valid : 0 Cert signature failed : 0
Issuer pubkey decode fail : 0 Self signed cert : 36768
Issuer cert not found : 0 Subject Issuer mismatch : 0
Certificate untrusted : 0 Cert chain too long : 0
Cert not sent by peer : 0
CRL counters:
CRL load failed : 0 CRL signature failed : 0
CRL not found : 0 CRL not yet valid : 0
CRL expired : 0