beautypg.com

Displaying an ssl profile – Brocade Virtual ADX Security Guide (Supporting ADX v03.1.00) User Manual

Page 163

background image

Brocade Virtual ADX Security Guide

151

53-1003250-01

SSL debug and troubleshooting commands

6

The keyfile-name variable specifies a locally stored SSL key that you want to display information for.

The * parameter displays a list of all locally stored SSL keys.

Displaying an SSL profile

The show ssl profile command allows you to display the configuration of a particular SSL profile or
all configured SSL profiles. The following example displays all configured SSL profiles on a Brocade
Virtual ADX.

Virtual ADX# show ssl profile *

SSL profile : ssl-profile-yue

Certificate file : certfile1

Key file : rsakey1

SSL cipher suite : RC4-MD5:EXP-RC4-MD5:RC4-SHA:DES-CBC-SHA:EXP-DES-CBC-SHA:DES-C

BC3-SHA:AES128-SHA:AES256-SHA:EXP1024-RC4-MD5:EXP1024-DES-CBC-SHA:EXP1024-RC4-SH

A:RC2-CBC-MD5:EXP-RC2-CBC-MD5:DES-CBC-MD5:DES-CBC3-MD5

Session-cache off

!

SSL profile : ssl-profile-ciphers

Certificate file : certfile2

Key file : rsakey2

SSL cipher suite : DES-CBC-SHA:EXP-DES-CBC-SHA:DES-CBC3-SHA:EXP1024-DES-CBC-SHA:

EXP1024-RC4-SHA

Session-cache on

!

Syntax: show ssl profile profile-name | *

The profile-name variable specifies an SSL profile that you want to display information for.

The * parameter displays all configured SSL profiles.

Displaying the session cache statistics for and SSL profile

Use the show ssl profile session-cache stats command to on the rconsole, as shown in the
following to display the session cache statistics for a specified SSL profile.

Virtual ADX#rconsole 1 1

Virtual ADX1/1#show ssl profile sptest session-cache stats

1024 items in the session cache

0 client connects (SSL_connect())

0 client renegotiates (SSL_connect())

0 client connects that finished

18369 server accepts (SSL_accept())

0 server renegotiates (SSL_accept())

18349 server accepts that finished

3496 session cache hits

6458 session cache misses

120 session cache timeouts

0 callback cache hits

8339 cache full overflows (ld allowed)

Syntax: show ssl profile profile-name session-cache stats

The profile-name variable specifies an SSL profile for the session cache statistics.