2050 CHAPTER 134: PKI CONFIGURATION COMMANDS

Example # Set the CRL update period to 20 hours.

<Sysname> system-view [Sysname] pki domain 1

[Sysname-pki-domain-1] crl update-period 20

crl url

Syntax

crl url url-string

 

undo crl url

View

PKI domain view

Parameter

url-string: URL of the CRL distribution point, a case-insensitive string of 1 to 127

 

characters in the format of ldap: //server_location, where server_location is

 

generally expressed by IP address.

Description

Use the crl url command to specify the URL of the CRL distribution point.

 

Use the undo crl url command to remove the configuration.

 

By default, no CRL distribution point URL is specified.

 

Note that when the URL of the CRL distribution point is not set, you should

 

acquire CA certificate and a local certificate, and then acquire a CRL through SCEP.

Example

# Specify the URL of the CRL distribution point.

 

<Sysname> system-view

 

[Sysname] pki domain 1

 

[Sysname-pki-domain-1] crl url ldap://169.254.0 30

display pki certificate

Syntax

display pki certificate { { ca local } domain domain-namerequest-status }

View

Any view

Parameter

ca: Displays the CA certificate.

 

local: Displays the local certificate.

 

domain-name: Name of the PKI domain, a string of 1 to 15 characters.

 

request-status: Displays the status of a certificate request.

Description

Use the display pki certificate command to display the contents of a certificate

 

or the status of certificate request.

Page 2050
Image 2050
3Com MSR 30, MSR 50 manual Crl url, Display pki certificate, Undo crl url