{"id":623,"date":"2012-09-01T00:00:00","date_gmt":"2012-09-01T00:00:00","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2012\/09\/01\/brocade-adx-ssl\/"},"modified":"2021-07-24T18:12:22","modified_gmt":"2021-07-24T18:12:22","slug":"brocade-adx-ssl","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html","title":{"rendered":"Brocade ADX &#8211; How to Configure SSL\/TLS"},"content":{"rendered":"\n<p>The Brocade ADX offers 2 ways to configure SSL. These are,<\/p>\n<ul>\n<li><strong>SSL (Termination)<\/strong> &#8211; Allows for SSL termination at the loadbalancer so that unencrypted traffic can be sent onto the backend servers. This is also known as client side encryption\/decryption.<\/li>\n<li><strong>SSL Proxy<\/strong> &#8211; Allows for the Brocade ADX to decrypt and then re-encrypt the traffic prior to sending it onto the backend servers.<\/li>\n<\/ul>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_65 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6622d13d82632\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6622d13d82632\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#Self_Signed\" title=\"Self Signed\">Self Signed<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#CSR\" title=\"CSR\">CSR<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#How_is_it_Signed\" title=\"How is it Signed ?\">How is it Signed ?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#Create_Key_Pair_CSR\" title=\"Create Key Pair \/ CSR\">Create Key Pair \/ CSR<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#Transfer_Certificate\" title=\"Transfer Certificate\">Transfer Certificate<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#Transferring_Certificate_Keys\" title=\"Transferring Certificate \/ Keys\">Transferring Certificate \/ Keys<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#SSL_Termination\" title=\"SSL (Termination)\">SSL (Termination)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#SSL_Proxy\" title=\"SSL Proxy\">SSL Proxy<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#Renegotiation\" title=\"Renegotiation\">Renegotiation<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#SSLTLS_Versions\" title=\"SSL\/TLS Versions\">SSL\/TLS Versions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#Troubleshooting\" title=\"Troubleshooting\">Troubleshooting<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\/#Show_Commands\" title=\"Show Commands\">Show Commands<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Self_Signed\"><\/span><strong>Self Signed<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>In order to create a self signed certificate (on the Brocade ADX) the following syntax is used:<\/p>\n<pre class=\"prettyprint\">ssl genrsa rsa.key 2048 &lt;password&gt;<br \/>ssl gencert certkey rsa.key signkey&nbsp;rsa.key &lt;password&gt; x509.crt<br \/><br \/>ssl profile &lt;profile-name&gt;<br \/>&nbsp; allow-self-signed-cert<\/pre>\n<h2><span class=\"ez-toc-section\" id=\"CSR\"><\/span><strong>CSR<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The benefit of generating a Certificate Signing Request is that the private key never leaves the LoadBalancer.<\/p>\n<p>Prior to creating a CSR a key pair is created, i.e a public and a private key. Once the CSR is generated, the CSR is created using a base-64 encoded PEM format. This CSR includes the various details previously entered DN, email etc and is then sent to the CA for signing.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_is_it_Signed\"><\/span><strong>How is it Signed ?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The CA takes an md5 of the certificate. This hash is then encrypted using the CA`s private key.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Create_Key_Pair_CSR\"><\/span><strong>Create Key Pair \/ CSR<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<pre class=\"prettyprint\">ssl genrsa filename.key 2048 password<br \/>ssl gencsr filename.key<\/pre>\n<h3><span class=\"ez-toc-section\" id=\"Transfer_Certificate\"><\/span><strong>Transfer Certificate<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Copy and paste the public certificate into a text file. This is then sent to the CA.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Transferring_Certificate_Keys\"><\/span><strong>Transferring Certificate \/ Keys<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The following steps show the commands required for copying certificate\/keys to the Brocade ADX using scp.<\/p>\n<p><span class=\"uk-badge\">NOTE <br \/><\/span> Any intermediate certificates should be appended to the public certificate before it is transferred to the ADX.<\/p>\n<pre class=\"prettyprint\">ip dns domain-name [domain name]<br \/>crypto key generate dsa<br \/>ip ssh<br \/>ip ssh scp enable<br \/><br \/>scp file.key admin@[adx ip address]:sslkeypair:filename.key:&lt;password&gt;:pem<br \/>scp file.cert admin@[adx ip address]:sslcert:filename.cert:pem<\/pre>\n<h2><span class=\"ez-toc-section\" id=\"SSL_Termination\"><\/span><strong>SSL (Termination)<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>In order to terminate SSL on a virtual server a SSL profile is created and assigned to the necessary Virtual Server.<\/p>\n<pre class=\"prettyprint\">ssl profile &lt;profile name&gt;<br \/>&nbsp; keypair-file &lt;private-key&gt;.key<br \/>&nbsp; certificate-file &lt;cert-file&gt;.cer<br \/>&nbsp; cipher-suite rsa-with-aes-256-sha <br \/>  cipher-suite rsa-with-aes-128-sha<br \/>  cipher-suite rsa-with-3des-ede-cbc-sha<br \/>  cipher-suite rsa-with-3des-ede-cbc-md5<br \/>  disable ssl2 ssl3 \/\/ 12.4s+<br \/>  session-cache server<br \/>&nbsp; enable-certificate-chaining<br \/><br \/>server virtual VIP_88.88.88.88 192.168.88.88<br \/>&nbsp; port ssl<br \/>&nbsp; port ssl ssl-terminate &lt;profile name&gt;<br \/>&nbsp; bind ssl rs1 http rs2 http<\/pre>\n<p><span class=\"uk-badge\">NOTE <br \/><\/span>&nbsp;The SSL profile within this example is configured to remove weak ciphers. Should you want to allow the use of all ciphers the command <span class=\"codeinline\">cipher-suite all-cipher-suites<\/span> is used.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"SSL_Proxy\"><\/span><strong>SSL Proxy<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>To decrypt and then re-encrypt SSL sessions on the ADX 2 profiles need creating, a client-side profile (the same that is created when configuring standard SSL Termination) and a server-side profile that contains just the root CA certificate. These profiles are then assigned to the VIP.<\/p>\n<pre class=\"prettyprint\">ssl profile sslclient-examplecom<br \/>&nbsp;keypair-file &lt;private-key&gt;.key<br \/>&nbsp;certificate-file &lt;cert-file&gt;.cer<br \/>&nbsp;cipher-suite all-cipher-suites<br \/>&nbsp;enable-certificate-chaining<br \/>&nbsp;session-cache off <br \/><br \/>ssl profile sslserver-examplecom<br \/>&nbsp;ca-cert-file &lt;cert-file&gt;.cer<br \/>&nbsp;session-cache offserver<br \/><br \/>virtual VIP_88.88.88.88 192.168.8.88<br \/>&nbsp;port ssl sticky<br \/>&nbsp;port ssl ssl-proxy sslclient-examplecom sslserver-examplecom<br \/>&nbsp;bind ssl&nbsp; rs1 ssl&nbsp; rs2 ssl<\/pre>\n<p><span class=\"uk-badge\">NOTE <br \/><\/span>&nbsp;If the server returns the root CA certificate then the ADX will fail to trust the issuer and the SSL session will fail. To resolve this ensure that the server only returns the identity and intermediate certificates.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Renegotiation\"><\/span>Renegotiation<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The Brocade ADX does not support Renegotiation. However in some cases the SSL handshake will fail if the &#8216;renegotiation_info&#8217; extension is ignored by the server (RFC5746). Because of this the ADX will respond with a null response to ensure maximum capability. This feature is enabled by default via the command <span class=\"codeinline\">server ssl respond-with-renegotiation-info<\/span>.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"SSLTLS_Versions\"><\/span>SSL\/TLS Versions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Below details the various SSL\/TLS protocols and at what point within the various code trains they were implemented,<\/p>\n<table class=\"table\">\n<tbody>\n<tr>\n<td><strong>Protocol Version<\/strong>&nbsp;<\/td>\n<td><strong>Implemented<\/strong>&nbsp;<\/td>\n<\/tr>\n<tr>\n<td>TLS1.1&nbsp;<\/td>\n<td>12.4t&nbsp;<\/td>\n<\/tr>\n<tr>\n<td>TLS1.2<\/td>\n<td>12.5.02e<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>For details on the various protocol versions supported within the ADX healthchecks can be found <a href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/mitigating-poodle-on-the-brocade-adx.html\">here<\/a>.<\/p>\n<p><span class=\"uk-badge\">NOTE<\/span>&nbsp;This section is currently work in progress.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Troubleshooting\"><\/span><strong>Troubleshooting<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>A great tool for troubleshooting SSL certificate issues is the command <span class=\"codeinline\">show ssl authentication-stats<\/span>.<\/p>\n<pre class=\"prettyprint\">SSH@ADX# rcon virtual<br \/>SSH@ADX-vbp# show ssl authentication-stats<br \/><br \/>SSL certificate verification counters:<br \/><br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Success :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 10&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Failure :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 43<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Unknown user :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Signature failed :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Certificate expired :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Certificate revoked :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cert not yet valid&nbsp; :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cert signature failed :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/>Issuer pubkey decode fail :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Self signed cert :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/>&nbsp;&nbsp;&nbsp; Issuer cert not found :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 43&nbsp;&nbsp;&nbsp; Subject Issuer mismatch :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/>&nbsp;&nbsp;&nbsp; Certificate untrusted :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cert chain too long :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/>&nbsp;&nbsp;&nbsp; Cert not sent by peer :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/><br \/>CRL counters:<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CRL load failed :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CRL signature failed :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CRL not found :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CRL not yet valid :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CRL expired :&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0<\/pre>\n<h3><span class=\"ez-toc-section\" id=\"Show_Commands\"><\/span><strong>Show Commands<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li>show ssl key *<\/li>\n<li>show ssl cert *<\/li>\n<li>ssl clear cert xxx.cert<\/li>\n<li>ssl clear key xxx.cert<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The Brocade ADX offers 2 ways to configure SSL. These are, SSL (Termination) &#8211; Allows for SSL termination at the loadbalancer so that unencrypted traffic can be sent onto the backend servers. This is also known as client side encryption\/decryption. SSL Proxy &#8211; Allows for the Brocade ADX to decrypt and then re-encrypt the traffic &#8230; <a title=\"Brocade ADX &#8211; How to Configure SSL\/TLS\" class=\"read-more\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\" aria-label=\"Read more about Brocade ADX &#8211; How to Configure SSL\/TLS\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Brocade ADX - How to Configure SSL\/TLS - Fir3net<\/title>\n<meta name=\"description\" content=\"The Brocade ADX offers 2 ways to configure SSL. These are, SSL (Termination) - Allows for SSL termination at the loadbalancer so that unencrypted traffic\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Brocade ADX - How to Configure SSL\/TLS - Fir3net\" \/>\n<meta property=\"og:description\" content=\"The Brocade ADX offers 2 ways to configure SSL. These are, SSL (Termination) - Allows for SSL termination at the loadbalancer so that unencrypted traffic\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\" \/>\n<meta property=\"og:site_name\" content=\"Fir3net\" \/>\n<meta property=\"article:published_time\" content=\"2012-09-01T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-07-24T18:12:22+00:00\" \/>\n<meta name=\"author\" content=\"Rick Donato\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rick Donato\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\"},\"author\":{\"name\":\"Rick Donato\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\"},\"headline\":\"Brocade ADX &#8211; How to Configure SSL\/TLS\",\"datePublished\":\"2012-09-01T00:00:00+00:00\",\"dateModified\":\"2021-07-24T18:12:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\"},\"wordCount\":530,\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"articleSection\":[\"Brocade Loadbalancers\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\",\"url\":\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\",\"name\":\"Brocade ADX - How to Configure SSL\/TLS - Fir3net\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/#website\"},\"datePublished\":\"2012-09-01T00:00:00+00:00\",\"dateModified\":\"2021-07-24T18:12:22+00:00\",\"description\":\"The Brocade ADX offers 2 ways to configure SSL. These are, SSL (Termination) - Allows for SSL termination at the loadbalancer so that unencrypted traffic\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fir3net.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Networking\",\"item\":\"https:\/\/www.fir3net.com\/networking\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Loadbalancers\",\"item\":\"https:\/\/www.fir3net.com\/networking\/loadbalancers\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Brocade Loadbalancers\",\"item\":\"https:\/\/www.fir3net.com\/networking\/loadbalancers\/brocade\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Brocade ADX &#8211; How to Configure SSL\/TLS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fir3net.com\/#website\",\"url\":\"https:\/\/www.fir3net.com\/\",\"name\":\"Fir3net\",\"description\":\"Keeping you in the know\",\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fir3net.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.fir3net.com\/#organization\",\"name\":\"Fir3net\",\"url\":\"https:\/\/www.fir3net.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"contentUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"width\":390,\"height\":88,\"caption\":\"Fir3net\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\",\"name\":\"Rick Donato\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"caption\":\"Rick Donato\"},\"description\":\"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders.\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Brocade ADX - How to Configure SSL\/TLS - Fir3net","description":"The Brocade ADX offers 2 ways to configure SSL. These are, SSL (Termination) - Allows for SSL termination at the loadbalancer so that unencrypted traffic","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html","og_locale":"en_US","og_type":"article","og_title":"Brocade ADX - How to Configure SSL\/TLS - Fir3net","og_description":"The Brocade ADX offers 2 ways to configure SSL. These are, SSL (Termination) - Allows for SSL termination at the loadbalancer so that unencrypted traffic","og_url":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html","og_site_name":"Fir3net","article_published_time":"2012-09-01T00:00:00+00:00","article_modified_time":"2021-07-24T18:12:22+00:00","author":"Rick Donato","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Rick Donato","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html#article","isPartOf":{"@id":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html"},"author":{"name":"Rick Donato","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037"},"headline":"Brocade ADX &#8211; How to Configure SSL\/TLS","datePublished":"2012-09-01T00:00:00+00:00","dateModified":"2021-07-24T18:12:22+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html"},"wordCount":530,"publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"articleSection":["Brocade Loadbalancers"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html","url":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html","name":"Brocade ADX - How to Configure SSL\/TLS - Fir3net","isPartOf":{"@id":"https:\/\/www.fir3net.com\/#website"},"datePublished":"2012-09-01T00:00:00+00:00","dateModified":"2021-07-24T18:12:22+00:00","description":"The Brocade ADX offers 2 ways to configure SSL. These are, SSL (Termination) - Allows for SSL termination at the loadbalancer so that unencrypted traffic","breadcrumb":{"@id":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.fir3net.com\/Loadbalancers\/Brocade\/brocade-adx-ssl.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fir3net.com\/"},{"@type":"ListItem","position":2,"name":"Networking","item":"https:\/\/www.fir3net.com\/networking"},{"@type":"ListItem","position":3,"name":"Loadbalancers","item":"https:\/\/www.fir3net.com\/networking\/loadbalancers"},{"@type":"ListItem","position":4,"name":"Brocade Loadbalancers","item":"https:\/\/www.fir3net.com\/networking\/loadbalancers\/brocade"},{"@type":"ListItem","position":5,"name":"Brocade ADX &#8211; How to Configure SSL\/TLS"}]},{"@type":"WebSite","@id":"https:\/\/www.fir3net.com\/#website","url":"https:\/\/www.fir3net.com\/","name":"Fir3net","description":"Keeping you in the know","publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fir3net.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.fir3net.com\/#organization","name":"Fir3net","url":"https:\/\/www.fir3net.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","contentUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","width":390,"height":88,"caption":"Fir3net"},"image":{"@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037","name":"Rick Donato","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","caption":"Rick Donato"},"description":"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders."}]}},"_links":{"self":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/623"}],"collection":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/comments?post=623"}],"version-history":[{"count":0,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/623\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/media?parent=623"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/categories?post=623"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/tags?post=623"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}