ssl whitelist userdefined-hostname

Function

The ssl whitelist userdefined-hostname command adds a domain name to the SSL domain name whitelist.

The undo ssl whitelist userdefined-hostname command deletes a user-defined domain name.

Format

ssl whitelist userdefined-hostname host-name

undo ssl whitelist userdefined-hostname { name host-name | all }

Parameters

Parameter	Description	Value
name host-name	Specifies a domain name. The value is the DNS Name or Common Name field in the server certificate.	The value is a case-insensitive string of 1 to 64 characters. If the name contains spaces, the length ranges from 3 to 66 characters. You need to use double quotation marks ("") to enclose the name, for example, "www.example.com".
all	Deletes all user-defined domain names from the SSL domain name whitelist.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

After SSL-encrypted traffic detection is enabled on the FW, website access over HTTPS may fail because the FW functions as the SSL connection proxy and the client requires deep check on the server certificate. In this case, you can add the server's domain name to the SSL domain name whitelist. Then, the FW will no longer function as the SSL connection proxy for SSL connection requests sent to this server.

Example

# Add domain name www.example.com to the SSL domain name whitelist.

<sysname> system-view
[sysname] ssl whitelist userdefined-hostname www.example.com