Ciphersuite - H3C MSR 20-20 Command Reference Manual

SSL C C
ONFIGURATION OMMANDS
144

ciphersuite

Syntax
ciphersuite [ rsa_3des_ede_cbc_sha | rsa_aes_128_cbc_sha | rsa_aes_256_cbc_sha |
rsa_des_cbc_sha | rsa_rc4_128_md5 | rsa_rc4_128_sha ] *
View SSL server policy view
Parameter rsa_3des_ede_cbc_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of 3DES_EDE_CBC and the MAC algorithm of SHA.
rsa_aes_128_cbc_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of 128-bit AES_CBC and the MAC algorithm of SHA.
rsa_aes_256_cbc_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm 256-bit AES_CBC, and the MAC algorithm of SHA.
rsa_des_cbc_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of DES_CBC, and the MAC algorithm of SHA.
rsa_rc4_128_md5: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of 128-bit RC4, and the MAC algorithm of MD5.
rsa_rc4_128_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of 128-bit RC4, and the MAC algorithm of SHA.
Description Use the command to specify the cipher suite(s) for an SSL server
ciphersuite
policy to support.
By default, an SSL server policy supports all cipher suites.
With no keyword specified, the command configures an SSL server policy to
support all cipher suites.
Example # Specify the cipher suites for SSL server policy policy1 to support as
rsa_rc4_128_md5 and rsa_rc4_128_sha.
<Sysname> system-view
[Sysname] ssl server-policy policy1
[Sysname-ssl-server-policy-policy1] ciphersuite rsa_rc4_128_md5 rsa_rc4_128_sha