Cisco Cisco Packet Data Gateway (PDG)
Global Configuration Mode Commands (A-K)
ca-certificate ▀
Command Line Interface Reference, StarOS Release 18 ▄
5313
ca-certificate
Configures and selects an X.509 CA certificate to enable a security gateway to perform certificate-based peer (client)
authentication. StarOS supports a maximum of 16 certificates and 16 CA (Certificate Authrority) root certificates. A
maximum of four CA root certificates can be bound to a crypto or SSL (Secure Sockets Layer) template.
authentication. StarOS supports a maximum of 16 certificates and 16 CA (Certificate Authrority) root certificates. A
maximum of four CA root certificates can be bound to a crypto or SSL (Secure Sockets Layer) template.
Product
All IPSec-related products
Privilege
Administrator, Security Administrator, Operator
Mode
Exec > Global Configuration
configure
Entering the above command sequence results in the following prompt:
[local]host_name(config)#
Syntax
ca-certificate name name { der url url_format | pem { data pemdata | url url_format [
cert-enc ] [ cert-hash-url url url_format ] } }
cert-enc ] [ cert-hash-url url url_format ] } }
no ca-certificate name name
no
Disables ca-certificate.
name
name
Specifies the name the CA certificate as an alphanumeric string of 1 through 128 characters.
der url
Specifies the use of the Distinguished Encoding Rules (DER) binary format.
url
is the Universal Reosurce Locator of the file containing certificate in der format.
pem
Specifies that the Privacy-enhanced Electronic Mail (PEM) format is to be used.
data
pemdata
ndicates that the CA certificate data will be in PEM format.
pemdata
must be an alphanumeric string of 1
through 4095 characters.
cert-enc
Specifiesa certificate encoding type other than default encoding type.
cert-hash-url
Specifies a hash of X.509 Certificate.