Close-Mode Wait - HP 3600 v2 Series Command Reference Manual

Description
Use the client-verify weaken command to enable SSL client weak authentication.
Use the undo client-verify weaken command to restore the default.
By default, SSL client weak authentication is disabled.
If the SSL server requires certificate-based client authentication and the SSL client weak authentication
function is enabled, whether the client must be authenticated is up to the client. If the client chooses to be
authenticated, the client must pass authentication before accessing the SSL server; otherwise, the client
can access the SSL server without authentication.
If the SSL server requires certificate-based client authentication and SSL client weak authentication is
disabled, the SSL client must pass authentication before accessing the SSL server.
NOTE:
The client-verify weaken command takes effect only when the SSL server requires certificate-based client
authentication.
Related commands: client-verify enable and display ssl server-policy.
Examples
# Enable SSL client weak authentication.
<Sysname> system-view
[Sysname] ssl server-policy policy1
[Sysname-ssl-server-policy-policy1] client-verify enable
[Sysname-ssl-server-policy-policy1] client-verify weaken

close-mode wait

Syntax
close-mode wait
undo close-mode wait
View
SSL server policy view
Default level
2: System level
Parameters
None
Description
Use the close-mode wait command to set the SSL connection close mode to wait mode. In this mode,
after sending a close-notify alert message to a client, the server does not close the connection until it
receives a close-notify alert message from the client.
Use the undo close-mode wait command to restore the default.
By default, an SSL server sends a close-notify alert message to the client and closes the connection
without waiting for the close-notify alert message from the client.
Related commands: display ssl server-policy.
280