H3C SOHO IE4300, Command Reference Manual

Page: 2460 / 3296

6
Table 1 Command output
Field Description
Server-verify
Indicates whether the client is enabled to use digital certificates to
authenticate servers.
display ssl server-policy
Use display ssl server-policy to display SSL server policy information.
Syntax
display ssl server-policy [ policy-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
policy-name
: Specifies an SSL server policy by its name, a case-insensitive string of 1 to 31
characters. If you do not specify a policy name, this command displays information about all SSL
server policies.
Examples
# Display information about the SSL server policy policy1 .
<Sysname> display ssl server-policy policy1
SSL server policy: policy1
PKI domain: server-domain
Ciphersuites:
DHE_RSA_AES_128_CBC_SHA
RSA_AES_128_CBC_SHA
Session cache size: 600
Caching timeout: 3600 seconds
Client-verify: Enabled
Certificate chain sending: Enabled
Table 2 Command output
Field Description
Caching timeout Session cache timeout time in seconds.
Client-verify
SSL client authentication mode, including:
•
Disabled —SSL client authentication is disabled.
•
Enabled —SSL client authentication is mandatory.
•
Optional —SSL client authentication is optional.
Certificate chain sending
Whether the SSL server is enabled to send the complete
certificate chain to the client during SSL negotiation.