H3C Technologies H3C S3600 Series Switches - Manual (Page 1195)

1-8
z If the SSL server is configured to authenticate the client, but the certificate of the SSL client does
not exist or cannot be trusted, request and install a certificate for the client.
2) You can use the display ssl server-policy command to view the cipher suite used by the SSL
server policy. If the cipher suite used by the SSL server does not match that used by the client, use
the ciphersuite command to modify the cipher suite of the SSL server.