HP e-Commerce / XML director server appliance sa8250 - Users Guide

C H A P T E R 6 SA8250 Scenarios
259
7. To provide the SA8250 with the download address for the CRL,
type this command:
HP SA8250/config/policygroup/richtest/service/
SSL/key/client-ca/revocation#url ftp://
10.1.2.64/Certsrv/myCA.crl user john password
smith
where john is your username and smith is your password. You
will see:
URL updated
8. To verify that the SA8250 can retrieve the CRL from your PKI,
type this command:
HP SA8250/config/policygroup/richtest/service/
SSL/key/client-ca/revocation#refresh now
This downloads the CRL from your PKI server 10.1.2.64 to the
SA8250. You will see:
Refresh completed, revocation list was obtained
from: ftp://10.1.2.64/Certsrv/myCA.crl
9. To set up the SA8250 to periodically update the CRL, type this
command:
HP SA8250/config/policygroup/richtest/service/
SSL/key/client-ca/revocation#refresh 480
This sets the CRL update period to 8 hours (480 minutes). You
will see:
Refresh will begin in 480 minute(s), url: ftp://
10.1.2.64/Certsrv/myCA.crl
10.To enable the CRL feature for the SA8250, type this command:
HP SA8250/config/policygroup/richtest/service/
SSL/key/client-ca/revocation#mode enable
You will see:
Mode changed to enable