Configuring An Ssl Client Policy; Configuration Prerequisites; Configuration Procedure; Displaying And Maintaining Ssl - 3Com 4500G Family Configuration Manual

For details about PKI configuration commands, refer to PKI Commands in the Security Volume.
For details about the public-key local create rsa command, refer to Public Key Commands in the
Security Volume.
For details about HTTPS, refer to HTTP Configuration in the System Volume.

Configuring an SSL Client Policy

An SSL client policy is a set of SSL parameters for a client to use when connecting to the server. An SSL
client policy takes effect only after it is associated with an application layer protocol.

Configuration Prerequisites

If the SSL server is configured to authenticate the SSL client, when configuring the SSL client policy,
you need to specify the PKI domain to be used for obtaining the certificate of the client. Therefore,
before configuring an SSL client policy, you must configure a PKI domain. For details about PKI domain
configuration, refer to PKI Configuration in the Security Volume.

Configuration Procedure

Follow these steps to configure an SSL client policy:
To do...
Enter system view
Create an SSL client policy and
enter its view
Specify a PKI domain for the SSL
client policy
Specify the preferred cipher suite
for the SSL client policy
Specify the SSL protocol version
for the SSL client policy
If you enable client authentication on the server, you must request a local certificate for the client.

Displaying and Maintaining SSL

To do...
Display SSL server policy
Use the command...
system-view
ssl client-policy policy-name
pki-domain domain-name
prefer-cipher
{ rsa_aes_128_cbc_sha |
rsa_des_cbc_sha |
rsa_rc4_128_md5 |
rsa_rc4_128_sha }
version { ssl3.0 | tls1.0 }
Use the command...
display ssl server-policy
1-6
Remarks
—
Required
Required
No PKI domain is configured by
default.
Optional
rsa_rc4_128_md5 by default
Optional
TLS 1.0 by default
Remarks
Available in any view