Filter
Top Products
ServerIron ADX Security Guide 195
53-1002440-03
SSL debug and troubleshooting commands
6
The * parameter displays a list of all locally stored SSL keys.
Displaying an SSL Profile
The show ssl profile command allows you to display the configuration of a particular SSL profile or
all configured SSL profiles. The following example displays all configured SSL profiles on a
ServerIron ADX.
Syntax: show ssl profile <profile-name> | *
The <profile-name> variable specifies an SSL profile that you want to display information for.
The * parameter displays all configured SSL profiles.
Displaying the session cache statistics for and SSL profile
Use the show ssl profile session-cache stats command to on the rconsole, as shown in the
following to display the session cache statistics for a specified SSL profile.
ServerIronADX# rconsole 1 1
ServerIronADX1/1# show ssl profile sptest session-cache stats
1024 items in the session cache
0 client connects (SSL_connect())
0 client renegotiates (SSL_connect())
0 client connects that finished
18369 server accepts (SSL_accept())
0 server renegotiates (SSL_accept())
18349 server accepts that finished
3496 session cache hits
6458 session cache misses
120 session cache timeouts
0 callback cache hits
8339 cache full overflows (ld allowed)
Syntax: show ssl profile <profile-name> session-cache stats
The <profile-name> variable specifies an SSL profile that you want to display session cache
statistics for.
ServerIronADX# show ssl profile *
SSL profile : ssl-profile-yue
Certificate file : certfile1
Key file : rsakey1
SSL cipher suite : RC4-MD5:EXP-RC4-MD5:RC4-SHA:DES-CBC-SHA:EXP-DES-CBC-SHA:DES-C
BC3-SHA:AES128-SHA:AES256-SHA:EXP1024-RC4-MD5:EXP1024-DES-CBC-SHA:EXP1024-RC4-SH
A:RC2-CBC-MD5:EXP-RC2-CBC-MD5:DES-CBC-MD5:DES-CBC3-MD5
SSL profile : 2048
Certificate file : certfile2
Key file : rsakey2
SSL cipher suite : RC4-MD5:EXP-RC4-MD5:RC4-SHA:DES-CBC-SHA:EXP-DES-CBC-SHA:DES-C
BC3-SHA:AES128-SHA:AES256-SHA:EXP1024-RC4-MD5:EXP1024-DES-CBC-SHA:EXP1024-RC4-SH
A:RC2-CBC-MD5:EXP-RC2-CBC-MD5:DES-CBC-MD5:DES-CBC3-MD5