ssl-algorithm

Function

The ssl-algorithm command configures an SSL encryption suite.

ssl-algorithm { medium | high | ssl-algorithm-string }

Parameter	Description	Value
medium	Specifies the SSL encryption suite with a medium security level.	–
high	Specifies the SSL encryption suite with a high security level.	–
ssl-algorithm-string	Specifies the user-defined SSL encryption suite.	The specified SSL encryption suite name must already exist.

SSL uninstallation profile view

2: Configuration level

FWConfiguration of an SSL encryption suite of the following security levels are supported:

medium: The security level of an SSL encryption suite is medium, and the suite can meet the general security requirements of a user. If many old version browsers exist on the client, this level is recommended to avoid conflicts when a user uses an old version browser to access the Internet.
high: The security level of an SSL encryption suite is high, and the suite can meet the high security requirements of a user. If the browser version is higher on the client, this level is recommended.
user-defined: The security level of an SSL encryption suite is subject to the encryption suite defined by a user. The user can use the user-defined encryption suite to configure the intensity of an SSL encryption algorithm. An example of the encryption suite is as follows:
DHE-RSA-AES128-SHA:AES128-SHA:AES128-SHA256:DHE-RSA-AES128-SHA256.

# Set the encryption algorithm intensity of SSL uninstallation profile abc to high.

<sysname> system-view
[sysname] slb
[sysname-slb] ssl-profile abc
[sysname-slb-ssl-profile-0] ssl-algorithm high