R2511-HP MSR Router Series Security Command Reference(V5)

314
Examples
# Set the CRL update period to 20 hours.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] crl update-period 20
crl url
Use crl url to specify the URL of the CRL distribution point.
Use undo crl url to remove the configuration.
Syntax
crl url url-string
undo crl url
Default
No CRL distribution point URL is specified.
Views
PKI domain view
Default command level
2: System level
Parameters
url-string: Specifies the URL of the CRL distribution point, a case-insensitive string of 1 to 125 characters
in the format of ldap://server_location or http://server_location, where server_location must be an IP
address or a domain name.
Usage guidelines
When the URL of the CRL distribution point is not set, you should acquire the CA certificate and a local
certificate, and then acquire a CRL through SCEP.
Examples
# Specify the URL of the CRL distribution point.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] crl url ldap://169.254.0.30
display pki certificate
Use display pki certificate to display the contents or request status of a certificate.
Syntax
display pki certificate { { ca | local } domain domain-name | request-status } [ | { begin | exclude |
include } regular-expression ]
Views
Any view