SSL Decryption Explained Decrypt Resign Copy Cert to Client Copy Cert to FP Internal Cert Internal Public Key Internal Sig Internal Private Key Internal CA Copy PVT Key Yahoo Pub/Pvt Key Yahoo Cert Yahoo Public Key Verisign Sig Internal External Original https request SSL Tunnel Created Clear Using Resigned Yahoo Cert Using Original Yahoo Cert

SSL Decryption Explained Decrypt Replace Key *NOTE The original untrusted Signature is kept if we resign the Client will trust an originally untrusted Certificate as they have a trusted Internal CA Cert Copy Cert to Client Copy Cert to FP Internal Cert Internal Public Key Internal Sig Internal Private Key Internal CA Copy PVT Key Untrusted Pub/Pvt Key Untrusted Cert Untrusted Public Key Untrusted Self Signed Internal External Original https request Untrusted Cert Untrusted Public Key Untrusted Cert Untrusted Self Signed *NOTE SSL Tunnel Created Clear Using original signed cert with Replace only Public Key Using Original Untrusted Cert

SSL Decryption Explained Decrypt Known Key Copy Trusted Server Certificate to Client Trusted Server Cert Trusted Server Public Key Trusted Server Cert Trusted Server Public Key Trusted Server Self Sig Copy Trusted Server PVT Key Trusted Server Private Key Trusted Server Self Sig DMZ External Original HTTPS request to DMZ Server Trusted Server Cert Trusted Server Cert Trusted Server Public Key Trusted Server Public Key Trusted Server Self Sig Trusted Server Self Sig SSL Tunnel Created Clear Using original Trusted Certificates & Keys Using Original Copies of Trusted Certificate & Keys