Owner's Manual

2050 CHAPTER 134: PKI CONFIGURATION COMMANDS
Example # Set the CRL update period to 20 hours.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] crl update-period 20
crl url
Syntax crl url url-string
undo crl url
View PKI domain view
Parameter url-string: URL of the CRL distribution point, a case-insensitive string of 1 to 127
characters in the format of ldap: //server_location, where server_location is
generally expressed by IP address.
Description Use the
crl url command to specify the URL of the CRL distribution point.
Use the undo crl url command to remove the configuration.
By default, no CRL distribution point URL is specified.
Note that when the URL of the CRL distribution point is not set, you should
acquire CA certificate and a local certificate, and then acquire a CRL through SCEP.
Example # Specify the URL of the CRL distribution point.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] crl url ldap://169.254.0 30
display pki certificate
Syntax display pki certificate {{ca | local } domain domain-name | request-status }
View Any view
Parameter ca: Displays the CA certificate.
local: Displays the local certificate.
domain-name: Name of the PKI domain, a string of 1 to 15 characters.
request-status: Displays the status of a certificate request.
Description Use the
display pki certificate command to display the contents of a certificate
or the status of certificate request.