About Peter Sprokkelenburg

Peter Sprokkelenburg · ‎08-08-2016

Mark, The wordpress support article along with the add_x_forward_proto worked like a charm. Thank you for all your help! Peter

Peter Sprokkelenburg · ‎08-04-2016

I thought I had this one solved but it appears not. I found some older posts on the forum from @owen that talk about how to do SSL descryption. For simple sites it works fine: Setup : http://community.brocade.com/t5/vADC-Forum/Stingray-with-SSL-encryption/m-p/72603#U72603 Response Rule : http://community.brocade.com/t5/vADC-Docs/HowTo-Rewriting-HTTP-responses/ta-p/73946 I have a test wordpress site setup for testing (vTM SSL Decrypt with and apache backend) I get mixed content errors and broken links (CSS won't load, etc) If I generalized the Response Rule to just handle http:// -> https:// it does work (CSS works, images load) but it impacts EVERYTHING that is HTTP. Example, any content posted on the site as a link is rewritten as https even if the site is not. I've tried more specific rules to limit what is transformed from http -> https but as customer work with a site and add content, plugins etc, the rule will constantly need to be updated to catch all. I've searched the forum for anything that might point me in the right direction and I'm currently at a lost. help...

Peter Sprokkelenburg · ‎08-26-2015

Okay so after some digging around I was able to find a script that will rewrite the response headers from http: -> https: $url = http.getResponseHeader( "Content-Type" ); if( !string.startsWith( $url, "text/html" ) ) break; $response = http.getResponseBody(); $response = string.replaceAll( $response, "http://", "https://" ); http.setResponseBody( $response ); But I still get a blocked message showing up when I go to a VS that is doing SSL Decryption. If a go to a site that is NOT using SSL Decryption I don't get any warnings that "Only secure content is being displayed" Still something missing either in the response script or a setting somewhere. Anyone else running into this?

Peter Sprokkelenburg · ‎08-26-2015

In the process of setting up my vTM's to do SSL Decryption websites and moving the certs off my individual backend servers. Everything is working, except Firefox, Chrome, Edge, IE etc are all showing limited content: "Some unencrypted elements on this page have been blocked" Do I need a response script to rewrite the "http://" - > "https://" The test site is running a default install of wordpress and I've set the wordpress url to the be "https://" Am I missing something?

Peter Sprokkelenburg · ‎08-26-2015

I'm running 10.1 with the following set and getting A on ssllabs.com: SSL_ECDHE_RSA_WITH_AES_256_GCM_SHA384, SSL_ECDHE_RSA_WITH_AES_128_GCM_SHA256, SSL_DHE_RSA_WITH_AES_256_GCM_SHA384, SSL_DHE_RSA_WITH_AES_128_GCM_SHA256, SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA384, SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA256, SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA, SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA, SSL_DHE_RSA_WITH_AES_256_CBC_SHA256, SSL_DHE_RSA_WITH_AES_128_CBC_SHA256, SSL_DHE_RSA_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_AES_256_GCM_SHA384, SSL_RSA_WITH_AES_128_GCM_SHA256, SSL_RSA_WITH_AES_256_CBC_SHA256, SSL_RSA_WITH_AES_128_CBC_SHA256, SSL_RSA_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA The only two clients that fail are IE6 / XP and Java 6u45, everything else has FS and I'm getting an A

Re: SSL decrypt with mixed content

SSL decrypt with mixed content

Re: SSL Decryption

SSL Decryption

Re: Disable RC4 Cipher from TLS