/ Zope / Apsis / Pound Mailing List / Archive / 2010 / 2010-04 / SSL and backend servers?

[ << ] [ >> ]

[ SSL super super sloowwww on IE / "Anne ... ] [ poundctl -c <socket> "-L/-l" ... ]

SSL and backend servers?
Anne Moore <diabeticithink(at)yahoo.com>
2010-04-05 23:35:51 [ FULL ]
Hi 
All
 
I was wondering if I 
must have an SSL certificates for every server, (pound server, and two backend 
servers), if I'm using pound for SSL?
 
Basically, I have 
two backend servers and one load balancing server (pound). Do I need three SSL 
certificates in order to have SSL working with pound? (On SSL cert installed on

each server?)
 
As always, thank you 
for your help!
 
Anne
Attachments:  
text.html text/html 1396 Bytes

RE: [Pound Mailing List] SSL and backend servers?
"Jacob Anderson" <jwa(at)beyond-ordinary.com>
2010-04-06 00:19:19 [ FULL ]
Hello Anne,

You only need one SSL certificate for Pound with SSL. If you need to have
SSL on your back end servers, then you need certificates for every IP
ADDRESS that will be secured with SSL.

Pound is intended to be an SSL terminator, so you really only need SSL on
the pound server.
[...]

RE: [Pound Mailing List] SSL and backend servers?
"Anne Moore" <diabeticithink(at)yahoo.com>
2010-04-06 00:58:07 [ FULL ]
You're awesome. Thanks! 

-----Original Message-----
From: Jacob Anderson [mailto:jwa(at)beyond-ordinary.com] 
Sent: Monday, April 05, 2010 6:19 PM
To: pound(at)apsis.ch
Subject: RE: [Pound Mailing List] SSL and backend servers?

Hello Anne,

You only need one SSL certificate for Pound with SSL. If you need to have
SSL on your back end servers, then you need certificates for every IP
ADDRESS that will be secured with SSL.

Pound is intended to be an SSL terminator, so you really only need SSL on
the pound server.
[...]

MailBoxer