R0106-HP MSR Router Series Security Command Reference(V7)

250
Default
No country code is set for a PKI entity.
Views
PKI entity view
Predefined user roles
network-admin
Parameters
country-code-string: Specifies a country code, a case-sensitive string of two characters, for example, CN
for China.
Examples
# Set CN as the country code of the PKI entity en.
<Sysname> system-view
[Sysname] pki entity en
[Sysname-pki-entity-en] country CN
crl check
Use crl check enable to enable CRL checking.
Use undo crl check enable to disable CRL checking.
Syntax
crl check enable
undo crl check enable
Default
CRL checking is enabled.
Views
PKI domain view
Predefined user roles
network-admin
Usage guidelines
A CRL is a file issued by a CA to publish all certificates that have been revoked. Revocation of a
certificate might occur before the certificate expires. CRL checking is intended for checking whether a
certificate has been revoked. A revoked certificate is no longer trusted.
Examples
# Disable CRL checking.
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa] undo crl check enable
Related commands
• pki import
• pki retrieve-certificate