Operation Manual – SSL-HTTPS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 SSL Configuration
1-3
To do...
Use the command...
Remarks
Specify the cipher suite(s)
for the SSL server policy
to support
ciphersuite
[
rsa_aes_128_cbc_sha
|
rsa_des_cbc_sha
|
rsa_rc4_128_md5
|
rsa_rc4_128_sha
]
*
Optional
By default, an SSL server
policy supports all cipher
suites.
Set the handshake
timeout time for the SSL
server
handshake timeout time
Optional
3,600 seconds by default
Configure the SSL
connection close mode
close-mode wait
Optional
Not wait by default
Set the maximum number
of cached sessions and
the caching timeout time
session
{
cachesize size
|
timeout time
} *
Optional
The defaults are as
follows:
500 for the maximum
number of cached
sessions,
3600 seconds for the
caching timeout time.
Enable certificate-based
SSL client authentication
client-verify enable
Optional
Not enabled by default
Note:
If you enable client authentication here, you must request a local certificate for the
client.
1.3.3 SSL Server Policy Configuration Example
I. Network requirements
z
A switch works as the HTTPS server.
z
A host works as the client and accesses the HTTPS server through HTTP secured
with SSL.
z
A certificate authentication (CA) issues a certificate to the switch.