Configuration Prerequisites; Configuration Procedure; Displaying And Maintaining Ssl - HP 3600 v2 Series Security Configuration Manual

Configuration prerequisites

If the SSL server is configured to authenticate the SSL client, you must configure the PKI domain for the SSL
client policy to use to obtain the certificate of the client. For more information about PKI domain
configuration, see the chapter "PKI configuration."

Configuration procedure

Follow these steps to configure an SSL client policy:
To do...
Enter system view
Create an SSL client policy and
enter its view
Specify a PKI domain for the SSL
client policy
Specify the preferred cipher suite
for the SSL client policy
Specify the SSL protocol version for
the SSL client policy
Enable certificate-based SSL server
authentication
NOTE:
If you enable client authentication on the server, you must request a local certificate for the client.

Displaying and maintaining SSL

To do...
Display SSL server policy
information
Display SSL client policy
information
Use the command...
system-view
ssl client-policy policy-name
pki-domain domain-name
prefer-cipher
{ rsa_3des_ede_cbc_sha |
rsa_aes_128_cbc_sha |
rsa_aes_256_cbc_sha |
rsa_des_cbc_sha |
rsa_rc4_128_md5 |
rsa_rc4_128_sha }
version { ssl3.0 | tls1.0 }
server-verify enable
Use the command...
display ssl server-policy
{ policy-name | all } [ | { begin |
exclude | include }
regular-expression ]
display ssl client-policy
{ policy-name | all } [ | { begin |
exclude | include }
regular-expression ]
311
Remarks
—
Required
Optional
No PKI domain is configured by
default.
Optional
rsa_rc4_128_md5 by default
Optional
TLS 1.0 by default
Optional
Enabled by default
Remarks
Available in any view