H3C S3100 Series Operation Manual page 1019

If the SSL server is configured to authenticate the client, but the certificate of the SSL client does
not exist or cannot be trusted, request and install a certificate for the client.
2) You can use the display ssl server-policy command to view the cipher suite used by the SSL
server policy. If the cipher suite used by the SSL server does not match that used by the client, use
the ciphersuite command to modify the cipher suite of the SSL server.
1-8