Quick question about SSL



I have a custom server on the back end which I cannot run SSL on for
various reasons beyond the scope of this email. Therefore, I would
like to set up a front end server which will (hopefully) provide SSL.

My question: I have no experience with SSL (or any other security
software for that matter). If I set up a front end server running
SSL, will it "take care of the SSL" i.e encrypt data to and from the
user's web browser when accessed by https, BUT ALSO communicate to my
server on the back end WITHOUT using SSL (because that server cannot
run SSL)?

What I need to do is have my back end server serve both servlets and
server pages which I have written. The server pages and servlets are
processing account information for customers, which must be secure of
course. What I need is something that will (hopefully) sit on the
front end and encrypt everything, but then talk "unencrypted" to the
back end to get server pages and hit servlets. Of course, the server
pages and data from the servlets MUST BE ENCRYPTED as they come out
and get sent to the user.

Basically, I'm hoping that simply sticking a front end server out
there (SSL-enabled) will handle everything I need handled. I already
have a front end server set up and working fine, I just haven't
compiled-in SSL yet.

Am I thinking about SSL correctly? Is this the way it works, or COULD
work?

Thanks.

.