10
rsa_aes_256_cbc_sha
: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm 256-bit AES_CBC, and MAC algorithm SHA.
rsa_aes_256_cbc
_
sha256
: Specifies the cipher suite that uses key exchange algorithm RSA,
data encryption algorithm 256-bit AES_CBC, and MAC algorithm SHA256.
rsa_des_cbc_sha
: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm DES_CBC, and MAC algorithm SHA.
rsa_rc4_128_md5
: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm 128-bit RC4, and MAC algorithm MD5.
rsa_rc4_128_sha
: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm 128-bit RC4, and MAC algorithm SHA.
Usage guidelines
SSL employs the following algorithms:
•
Data encryption algorithms
—Encrypt data to ensure privacy. Commonly used data
encryption algorithms are usually symmetric key algorithms. When using a symmetric key
algorithm, the SSL server and the SSL client must use the same key.
•
Message Authentication Code (MAC) algorithms
—Calculate the MAC value for data to
ensure integrity. Commonly used MAC algorithms include MD5 and SHA. When using a MAC
algorithm, the SSL server and the SSL client must use the same key.
•
Key exchange algorithms
—Implement secure exchange of the keys used by the symmetric
key algorithm and MAC algorithm. Commonly used key exchange algorithms are asymmetric
key algorithms, such as RSA.
The SSL client sends the preferred cipher suite to the SSL server. The server compares the received
cipher suite with the cipher suits it supports. If a match is found, the cipher suite negotiation
succeeds. If no match is found, the negotiation fails.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure SSL client policy
policy1
to support the key exchange algorithm RSA, data encryption
algorithm 128-bit AES_CBC, and MAC algorithm SHA.
<Sysname> system-view
[Sysname] ssl client-policy policy1
[Sysname-ssl-client-policy-policy1] prefer-cipher rsa_aes_128_cbc_sha
Related commands
ciphersuite
display ssl client-policy
server-verify enable
Use
server-verify enable
to enable the SSL client to use digital certificates to authenticate
the SSL server.
Use
undo server-verify enable
to disable SSL server authentication. The SSL client does
not authenticate the SSL server.
Syntax
server-verify enable
undo server-verify enable
Содержание SOHO IE4300
Страница 114: ...ii tftp client ipv6 source 41 tftp client source 41 tftp ipv6 42 tftp server acl 44 tftp server ipv6 acl 44...
Страница 285: ...i Contents Tcl commands 1 cli 1 tclquit 1 tclsh 2...
Страница 288: ...i Contents Python commands 1 exit 1 python 1 python filename 2...
Страница 291: ...i Contents Automatic configuration commands 1 autodeploy udisk enable 1...
Страница 323: ...25 Sysname Ten GigabitEthernet1 0 51 undo shutdown Related commands irf port...
Страница 396: ...i Contents Bulk interface configuration commands 1 display interface range 1 interface range 1 interface range name 3...
Страница 460: ...i Contents Port isolation commands 1 display port isolate group 1 port isolate enable 2 port isolate group 2...
Страница 465: ...ii stp vlan enable 55 vlan mapping modulo 55...
Страница 589: ...60 Examples Enable LLDP for automatic IP phone discovery Sysname system view Sysname voice vlan track lldp...
Страница 602: ...12 Related commands display mvrp statistics...
Страница 609: ...i Contents VLAN mapping commands 1 display vlan mapping 1 vlan mapping 2...
Страница 678: ...9 Related commands reset pppoe relay statistics...
Страница 846: ...i Contents Basic IP forwarding commands 1 display fib 1 ip forwarding table save 2...
Страница 1073: ...i Contents HTTP redirect commands 1 http redirect https port 1 http redirect ssl server policy 1...
Страница 1087: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1340: ...9 Sysname ipv6 route static default preference 120 Related commands display ipv6 routing table protocol...
Страница 1649: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1668: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1770: ...i Contents Time range commands 1 display time range 1 time range 1...
Страница 2026: ...34 Related commands display mac authentication...
Страница 2028: ...ii...
Страница 2143: ...i Contents User profile commands 1 display user profile 1 user profile 2...
Страница 2308: ...61 ipsec transform set...
Страница 2473: ...i Contents TCP attack prevention commands 1 tcp anti naptha enable 1 tcp check state interval 1 tcp state 2...
Страница 2531: ...i Contents SAVI commands 1 ipv6 savi down delay 1 ipv6 savi log enable 1 ipv6 savi strict 2...
Страница 2534: ...3 Sysname ipv6 savi strict Related commands ipv6 verify source...
Страница 2541: ...i Contents Crypto engine commands 1 display crypto engine 1 display crypto engine statistics 1 reset crypto engine statistics 3...
Страница 2545: ...i Contents FIPS commands 1 display crypto version 1 display fips status 1 fips mode enable 2 fips self test 4...
Страница 2791: ...14 Sysname track 1 Related commands delay display track...
Страница 2939: ...9 sntp authentication keyid sntp reliable authentication keyid...
Страница 2967: ...27 Related commands apply poe profile poe enable poe max power interface view poe priority...
Страница 3240: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 3263: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...