Symptoms
Previously, SSL forward proxy cached forged server certs on the client side even if the server cert was untrusted. Now, SSL forward proxy does not cache the forged cert if the server cert is untrusted.
Impact
You might notice a performance impact compared with previous releases.
Conditions
SSL forward proxy is enabled and server cert is untrusted.
Fix Information
There is a behavior change: the system does not cache forged server certs if the cert is not trusted.
Behavior Change
Previously, SSL forward proxy cached forged server certs on the client side even if the server cert was untrusted. Now, SSL forward proxy does not cache the forged cert if the server cert is untrusted. As a result, you might notice slower performance in this release under these conditions.