ocsp signature enable

Function

The ocsp signature enable command enables the function of signing OCSP request packets.

The undo ocsp signature enable command disables the function of signing OCSP request packets.

By default, the function of signing OCSP request packets is disabled.

Only devices in NETCONF mode support this command.

Format

ocsp signature enable

undo ocsp signature enable

Parameters

None

Views

PKI realm view

Default Level

2: Configuration level

Usage Guidelines

When the certificate check mode is set to OCSP, the device sends OCSP request packets to the OCSP server. To improve access security, run the ocsp signature enable command to enable the function of signing OCSP request packets.

Example

<HUAWEI> system-view
[HUAWEI] pki realm abc
[HUAWEI-pki-realm-abc] ocsp signature enable