3com MSR 20-20 참조 매뉴얼

C

HAPTER

 134: PKI C

ONFIGURATION

 C

OMMANDS

# Set the CRL update period to 20 hours.

<Sysname> system-view

[Sysname] pki domain 1

[Sysname-pki-domain-1] crl update-period 20 

crl url url-string

PKI domain view

url-string: URL of the CRL distribution point, a case-insensitive string of 1 to 127 
characters in the format of ldap: //server_location, where server_location is 
generally expressed by IP address.

Use the crl url command to specify the URL of the CRL distribution point.

Use the undo crl url command to remove the configuration.

By default, no CRL distribution point URL is specified.

Note that when the URL of the CRL distribution point is not set, you should 
acquire CA certificate and a local certificate, and then acquire a CRL through SCEP.

# Specify the URL of the CRL distribution point.

<Sysname> system-view

[Sysname] pki domain 1

[Sysname-pki-domain-1] crl url ldap://169.254.0 30 

display pki certificate  { { ca | local } domain domain-name | request-status }

Any view

ca: Displays the CA certificate.

local: Displays the local certificate.

domain-name: Name of the PKI domain, a string of 1 to 15 characters.

request-status: Displays the status of a certificate request.

Use the display pki certificate command to display the contents of a certificate 
or the status of certificate request.