424
network-operator
Parameters
policy-name: Specifies an SSL server policy by its name, a case-insensitive string of 1 to 31 characters.
If you do not specify this argument, the command displays information about all SSL server policies.
Examples
# Display information about the SSL server policy policy1.
<Sysname> display ssl server-policy policy1
SSL server policy: policy1
PKI domain: server-domain
Ciphersuites:
DHE_RSA_AES_128_CBC_SHA
RSA_AES_128_CBC_SHA
Session cache size: 600
Client-verify: enabled
Table 51 Command output
Field Description
Client-verify
Indicates whether the server is enabled to use digital certificates to
authenticate clients.
pki-domain (SSL server policy view)
Use pki-domain to specify a PKI domain for an SSL server policy.
Use undo pki-domain to restore the default.
Syntax
pki-domain domain-name
undo pki-domain
Default
No PKI domain is specified for an SSL server policy.
Views
SSL server policy view
Predefined user roles
network-admin
Parameters
domain-name: Specifies a PKI domain by its name, a case-insensitive string of 1 to 31 characters.
Usage guidelines
If you use this command to specify a PKI domain for an SSL server policy, the SSL server that references
the SSL server policy will obtain its digital certificate through the specified PKI domain.
Examples
# Specify PKI domain server-domain for the SSL server policy policy1.