SSL密码中等强度，无法过等保，该如何修改？

可以用这个   ，400给的答复

使用弱散列算法签署的 SSL 证书(CVE-2004-2761)(原理扫描)

Comware平台可以通过如下方式解决：
在设备上导入一个强hash算法的服务器证书，设备缺省算法是md5，可以导入sha证书，证书服务器可参照网上教程自己搭建。
1.导入CA证书certnew.cer和服务器证书server.pfx
[H3C] pki import domain sslvpn der ca filename certnew.cer
[H3C] pki import domain sslvpn p12 local filename server.pfx

2.OpenSSL 信息泄露漏洞（CVE-2016-2183）新建ssl server policy，关闭des/3des相关的加密套件
# 规避方式

undo ip http enable

undo ip https enable

[H3C]ssl server-policy fxm

[H3C-ssl-server-policy-fxm]ci

[H3C-ssl-server-policy-fxm]ciphersuite ? //选个非EDS，3EDS的算法

  dhe_rsa_aes_128_cbc_sha Cipher suite that uses DHE RSA, 128-bit AES_CBC, and

                           SHA

  dhe_rsa_aes_256_cbc_sha Cipher suite that uses DHE RSA, 256-bit AES_CBC, and

                           SHA

  exp_rsa_des_cbc_sha Export cipher suite that uses RSA, DES_CBC, and SHA

  exp_rsa_rc2_md5 Export cipher suite that uses RSA, RC2, and MD5

  exp_rsa_rc4_md5 Export cipher suite that uses RSA, RC4, and MD5

  rsa_3des_ede_cbc_sha Cipher suite that uses RSA, 3DES_EDE_CBC, and SHA

  rsa_aes_128_cbc_sha Cipher suite that uses RSA, 128-bit AES_CBC, and SHA

  rsa_aes_256_cbc_sha Cipher suite that uses RSA, 256-bit AES_CBC, and SHA

  rsa_des_cbc_sha Cipher suite that uses RSA, DES_CBC, and SHA

  rsa_rc4_128_md5 Cipher suite that uses RSA, 128-bit RC4, and MD5

  rsa_rc4_128_sha Cipher suite that uses RSA, 128-bit RC4, and SHA

引用这个策略：

ip https ssl-server-policy fxm

重启https服务。

ip http enable

ip https enable