3com MSR 20-20 참조 매뉴얼

C

HAPTER

 144: SSL C

ONFIGURATION

 C

OMMANDS

SSL server policy view

None

Use the client-verify enable command to enable certificate-based SSL client 
authentication, that is, to enable the SSL server to perform certificate-based 
authentication of the client during the SSL handshake process.

Use the undo client-verify enable command to restore the default.

By default, certificate-based SSL client authentication is disabled.

# Enable certificate-based client authentication.

<Sysname> system-view

[Sysname] ssl server-policy policy1

[Sysname-ssl-server-policy-policy1] client-verify enable 

SSL server policy view

None

Use the close-mode wait command to set the SSL connection close mode to 
wait. In this mode, after sending a close-notify message to a client, the server 
does not close the connection until it receives a close-notify message from the 
client.

Use the undo close-mode wait command to restore the default.

By default, an SSL server sends a close-notify alert message to the client and close 
the connection without waiting for the close-notify alert message from the client.

# Set the SSL connection close mode to wait.

<Sysname> system-view

[Sysname] ssl server-policy policy1

[Sysname-ssl-server-policy-policy1] close-mode wait