424 
network-operator 
Parameters 
policy-name: Specifies an SSL server policy by its name, a case-insensitive string of 1 to 31 characters. 
If you do not specify this argument, the command displays information about all SSL server policies. 
Examples 
# Display information about the SSL server policy policy1. 
<Sysname> display ssl server-policy policy1 
 SSL server policy: policy1 
     PKI domain: server-domain 
     Ciphersuites: 
         DHE_RSA_AES_128_CBC_SHA 
         RSA_AES_128_CBC_SHA 
     Session cache size: 600 
     Client-verify: enabled 
Table 51 Command output 
Field Description 
Client-verify 
Indicates whether the server is enabled to use digital certificates to 
authenticate clients. 
 
pki-domain (SSL server policy view) 
Use pki-domain to specify a PKI domain for an SSL server policy. 
Use undo pki-domain to restore the default. 
Syntax 
pki-domain domain-name 
undo pki-domain 
Default 
No PKI domain is specified for an SSL server policy. 
Views 
SSL server policy view 
Predefined user roles 
network-admin 
Parameters 
domain-name: Specifies a PKI domain by its name, a case-insensitive string of 1 to 31 characters. 
Usage guidelines 
If you use this command to specify a PKI domain for an SSL server policy, the SSL server that references 
the SSL server policy will obtain its digital certificate through the specified PKI domain. 
Examples 
# Specify PKI domain server-domain for the SSL server policy policy1.