RE: iSeries SSL, Comodo certificate - no green padlock on browser

["Tom" <tomh@xxxxxxxxxxx>]

Thanks for the info - I'll be doing some reading!


Thanks,
TomH

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Nathan Andelin
Sent: Tuesday, March 29, 2016 1:03 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: iSeries SSL, Comodo certificate - no green padlock on browser

Reverse proxy has other benefits. You can offload encryption workloads to a
separate server. You can deploy the reverse proxy on a separate network
segment to satisfy PCI requirements. If your IBM i server is down for
scheduled maintenance, the reverse proxy can be changed to return a page
about the maintenance activity.



On Tue, Mar 29, 2016 at 9:10 AM, Tim Bronski <tim.bronski@xxxxxxxxx> wrote:

> Well the reverse proxy is a gateway machine where the TLS terminates. 
> You could use Apache on a linux server with mod_proxy. The IBM i is a 
> backend web server. If you google up Apache Reverse-Proxy etc you'll 
> find more practical info than I could retype but here's an article 
> that's somewhat
> related:
> https://timwells.net/blog/hardening-tls-apache-reverse-proxy/