3Com MSR 30, MSR 50 manual Pki validate-certificate, Root-certificate fingerprint

2062 CHAPTER 134: PKI CONFIGURATION COMMANDS

pki validate-certificate

Syntax	pki validate-certificate { ca local } domain domain-name
View	System view
Parameter	ca: Validates the CA certificate.
	local: Validate the local certificate.
	domain-name: Name of the PKI domain the certificate to be validated is for, a
	string of 1 to 15 characters.
Description	Use the pki validate-certificatecommand to verify the validity of a certificate.
	The focus of certificate validity verification is to check that the certificate is signed
	by the CA and that the certificate has neither expired nor been revoked.
Related command: pki domain.
Example	# Verify the validity of the local certificate.
	<Sysname> system-view
	[Sysname] pki validate-certificate domain 1

root-certificate fingerprint

Syntax	root-certificate fingerprint { md5 sha1 } string
	undo root-certificate fingerprint
View	PKI domain view
Parameter	md5: Uses an MD5 fingerprint.
	sha1: Use a SHA1 fingerprint.
	string: Fingerprint to be used. An MD5 fingerprint must be a string of 32
	characters in hexadecimal. A SHA1 fingerprint must be a string of 40 characters in
	hexadecimal.
Description	Use the root-certificate fingerprint command to configure the fingerprint to
	be used for validating the CA root certificate.
	Use the undo root-certificate fingerprint command to remove the
	configuration.
	By default, no fingerprint is configured for validating the CA root certificate.