1. SSL Decryption Explained
Decrypt Resign
Copy Cert to Client
Copy Cert to FP
Internal Cert
Internal Public
Key
Internal Sig
Internal Private
Key
Internal CA
Copy PVT Key
Yahoo
Pub/Pvt
Key
Yahoo Cert
Yahoo Public
Key
Verisign Sig
Internal
External
Original https request
SSL Tunnel Created
Clear
Using Resigned Yahoo Cert
Using Original Yahoo Cert

2. SSL Decryption Explained
Decrypt Replace Key
*NOTE
The original untrusted
Signature is kept if we resign the
Client will trust an originally untrusted
Certificate as they have a trusted
Internal CA Cert
Copy Cert to Client
Copy Cert to FP
Internal Cert
Internal Public
Key
Internal Sig
Internal Private
Key
Internal CA
Copy PVT Key
Untrusted
Pub/Pvt
Key
Untrusted Cert
Untrusted Public
Key
Untrusted
Self Signed
Internal
External
Original https request
Untrusted Cert
Untrusted Public
Key
Untrusted Cert
Untrusted
Self Signed
*NOTE
SSL Tunnel Created
Clear
Using original signed cert with
Replace only Public Key
Using Original Untrusted Cert

3. SSL Decryption Explained Decrypt Known Key
Copy Trusted Server Certificate to Client
Trusted
Server Cert
Trusted Server
Public Key
Trusted
Server Cert
Trusted Server
Public Key
Trusted Server
Self Sig
Copy Trusted Server PVT Key
Trusted Server
Private Key
Trusted Server
Self Sig
DMZ
External
Original HTTPS request to DMZ Server
Trusted
Server Cert
Trusted
Server Cert
Trusted Server
Public Key
Trusted Server
Public Key
Trusted Server
Self Sig
Trusted Server
Self Sig
SSL Tunnel Created
Clear
Using original
Trusted Certificates & Keys
Using Original Copies of
Trusted Certificate & Keys