391
{ If the server’s certificate cannot be trusted, install the root certificate of the CA that issued
the local certificate to the SSL server on the SSL client, or let the server request a certificate
from the CA that the SSL client trusts.
{ If the SSL server is configured to authenticate the client, but the SSL client has no certificate
or the certificate cannot be trusted, request and install a certificate for the client.
2. Use the display ssl server-policy command to view the cipher suites that the SSL server
policy supports. If the server and the client have no matching cipher suite, use the ciphersuite
command to modify the cipher suite configuration of the SSL server.