Version 7.2 331 Mediant MSBR
Reference Guide 55. tls
55 tls
This command configures the TLS Contexts table, which lets you define TLS certificates,
referred to as TLS Contexts.
Syntax
(config-network)# tls <Index>
(tls-<Index>)#
Command Description
Certification actions - see Section 55.1.
Displays ciphers.
Defines the supported cipher suite for TLS clients.
ciphers-server
Defines the supported cipher suite for the TLS server (in
OpenSSL cipher list format).
dh-key-size
Defines the Diffie-Hellman (DH) key size (in bits).
name
Defines a descriptive name, which is used when
associating the row in other tables.
ocsp-default-response
Determines whether the <device> allows or rejects peer
certificates if it cannot connect to the OCSP server.
Defines the OCSP server's TCP port number.
ocsp-server
Enables or disables certificate checking using OCSP.
ocsp-server-primary
Defines the IP address (in dotted-decimal notation) of the
primary OCSP server.
ocsp-server-secondary
Defines the IP address (in dotted-decimal notation) of the
secondary OCSP server (optional).
private-key
{delete|generate|impor
Private key actions - see Section 55.2.
require-strict-cert
Enables the validation of the extensions (keyUsage and
extentedKeyUsage) of peer certificates.
tls-version {tls-
v1.0|tls-v1.0_1.1|tls-
v1.0_1.1_1.2|tls-
v1.0_1.2|tls-v1.1|tls-
v1.1_1.2|tls-
Defines the supported SSL/TLS protocol version. Clients
attempting to communicate with the <device> using a
different TLS version are rejected.
trusted-root {clear-
and-
import|delete|detail|e
Trusted root certificate actions - see Section 55.3.