< Home

pki http

Function

The pki http command configures a device to use HTTP to download a CA certificate, local certificate, or CRL.

Format

pki http [ esc ] url-address save-name

Parameters

Parameter

Description

Value

esc

Specifies the URL in ASCII code.

-

url-address

Specifies the URL of the CA certificate, local certificate, or CRL.

The value is a string of 1 to 128 case-sensitive characters.

save-name

Specifies the name of a CA certificate, local certificate, or CRL saved on the flash of the device.

The value is a string of 1 to 64 case-insensitive characters.

Views

System view

Default Level

3: Management level

Usage Guidelines

Before you configure a device to use HTTP to download a CA certificate, local certificate, or CRL, ensure that the flash of the device has enough space to accommodate the CA certificate, local certificate, or CRL.

The keyword esc supports the entering of URLs that include the question mark (?) in ASCII code, and 3f is the hexadecimal ASCII code for the question mark (?). Therefore, the entered URL must be in \x3f format. For example, the URL that an administrator needs to enter is http://www.***.com\x3fpage1, instead of http://www.***.com?page1. If the administrator wants to configure http://www.***.com?page1\x3f that includes both a question mark (?) and \x3f, the administrator should add an escape character (\) to \x3f and enter http://www.***.com\x3fpage1\\x3f.

Example

# Configure a device to use HTTP to download a local certificate.

<HUAWEI> system-view
[HUAWEI] pki http http://10.1.1.1/test.cer local.cer

# Configure a device to use HTTP to download a local certificate.

<HUAWEI> system-view
[HUAWEI] pki http esc http://www.***.com\x3fpage1\\x3f local.cer
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >