version
Use version to specify an SSL protocol version for an SSL client policy.
Use undo version to restore the default.
Syntax
In non-FIPS mode:
version { ssl3.0 | tls1.0 | tls1.1 | tls1.2 }
undo version
In FIPS mode:
version { tls1.0 | tls1.1 | tls1.2 }
undo version
Default
An SSL client policy uses SSL protocol version TLS 1.0.
Views
SSL client policy view
Predefined user roles
network-admin
mdc-admin
Parameters
ssl3.0: Specifies SSL 3.0.
tls1.0: Specifies TLS 1.0.
tls1.1: Specifies TLS 1.1.
tls1.2: Specifies TLS 1.2.
Usage guidelines
To ensure security, do not specify SSL 3.0 for an SSL client policy.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Set the SSL protocol version to TLS 1.0 for SSL client policy policy1.
<Sysname> system-view [Sysname] ssl client-policy policy1 [Sysname-ssl-client-policy-policy1] version tls1.0
Related commands
display ssl client-policy