188
By default, the HTTPS service is not associated with any certificate attribute access
control policy.
Association of the HTTPS service with a certificate attribute access control policy can
control the access rights of clients.
Related commands: display ip https (in HTTP in the Fundamentals Command
Reference); pki certificate access-control-policy (in PKI in the Security Command
Reference).
Examples
Associate the HTTPS server to certificate attribute access control policy myacl.
<Sysname> system-view
[Sysname] ip https certificate access-control-policy myacl
ip https enable
Syntax
ip https enable
undo ip https enable
View
System view
Default Level
3: Manage level
Parameters
None
Description
Use the ip https enable command to enable the HTTPS service.
Use the undo ip https enable command to disable the HTTPS service.
By default, the HTTPS service is disabled.
The device can act as the HTTP server and the users can access and control the device
through the Web function only after the HTTP service is enabled.
Enabling of the HTTPS service triggers an SSL handshake negotiation process. During the
process, if a local certificate of the device already exists, the SSL negotiation is
successfully performed, and the HTTPS service can be started normally. If no local
certificate exists, a certificate application process will be triggered by the SSL
negotiation. Since the application process takes much time, the SSL negotiation often
fails and the HTTPS service cannot be started normally. Therefore, the ip https enable
To Next Page
Loading...
Need help?
General
