183
server-pki-domain domain-name: Specifies the PKI domain for verifying the server's
certificate. The domain-name argument represents the PKI domain name, a
case-insensitive string of 1 to 31 characters. If you do not specify the server's PKI domain,
the client uses the PKI domain of its own certificate to verify the server's certificate.
The PKI domain name cannot contain characters in the following table:
Tilde ~ Dot .
Asterisk * Left angle bracket <
Backslash \ Right angle bracket >
Vertical bar | Quotation marks "
Colon : Apostrophe '
Keywords for specifying the publickey algorithms used in publickey authentication:
ecdsa: Specifies the public key algorithm ecdsa.
x509v3-ecdsa-sha2-nistp256: Specifies the public key algorithm
x509v3-ecdsa-sha2-nistp256.
x509v3-ecdsa-sha2-nistp384: Specifies the public key algorithm
x509v3-ecdsa-sha2-nistp384.
Keywords for specifying the preferred client-to-server encryption algorithms:
aes128-ctr: Specifies the encryption algorithm aes128-ctr.
aes192-ctr: Specifies the encryption algorithm aes192-ctr.
aes256-ctr: Specifies the encryption algorithm aes256-ctr.
aes256-gcm: Specifies the encryption algorithm aes256-gcm.
aes128-gcm: Specifies the encryption algorithm aes128-gcm.
Keywords for specifying the preferred client-to-server HMAC algorithms:
sha2-256: Specifies the HMAC algorithm sha2-256.
sha2-512: Specifies the HMAC algorithm sha2-512.
Keywords for specifying the preferred key exchange algorithms:
ecdh-sha2-nistp256: Specifies the key exchange algorithm ecdh-sha2-nistp256.
ecdh-sha2-nistp384: Specifies the key exchange algorithm ecdh-sha2-nistp384.
The following keywords were modified:
Keywords for the preferred client-to-server encryption algorithm prefer-ctos-cipher:
The 3des keyword was changed to 3des-cbc.
The aes128 keyword was changed to aes128-cbc.
The aes256 keyword was changed to aes256-cbc.
The des keyword was changed to des-cbc.