H3C SOHO IE4300, Command Reference Manual

Page: 2466 / 3296

12
When the number of cached sessions reaches the maximum, SSL does not cache new sessions.
When the timeout timer for a cached session expires, SSL deletes the session.
Examples
# Set the maximum number of cached sessions to 600, and the timeout time for cached sessions to
1800 seconds.
<Sysname> system-view
[Sysname] ssl server-policy policy1
[Sysname-ssl-server-policy-policy1] session cachesize 600 timeout 1800
Related commands
display ssl server-policy
ssl client-policy
Use ssl client-policy to create an SSL client policy and enter its view, or enter the view of an
existing SSL client policy.
Use
undo ssl client-policy
to delete an SSL client policy.
Syntax
ssl client-policy policy-name
undo ssl client-policy policy-name
Default
No SSL client policies exist.
Views
System view
Predefined user roles
network-admin
Parameters
policy-name
: Specifies an SSL client policy by its name, a case-insensitive string of 1 to 31
characters.
Usage guidelines
This command creates an SSL client policy for which you can configure SSL parameters that the
client uses to establish a connection to the server. The parameters include a PKI domain and a
preferred cipher suite. An SSL client policy takes effect only after it is associated with an application.
Examples
# Create an SSL client policy named policy1 and enter its view.
<Sysname> system-view
[Sysname] ssl client-policy policy1
[Sysname-ssl-client-policy-policy1]
Related commands
display ssl client-policy
ssl renegotiation disable
Use
ssl renegotiation disable
to disable SSL session renegotiation.