crl

Function

The crl http command configures the automatic update of the CRL through HTTP.

The crl ldap command configures the automatic update of the CRL through LDAP.

The undo crl http command cancels the automatic update of the CRL through HTTP.

The undo crl ldap command cancels the automatic update of the CRL through LDAP.

By default, the CRL is updated automatically through HTTP.

Format

crl { ldap | http }

undo crl { ldap | http }

Parameters

None

Views

PKI domain name configuration view

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
pki write

Usage Guidelines

Usage Scenario

To use HTTP/LDAP for updating the CRL automatically, run the crl http/ldap command first.

Note the following when the device automatically updates the CRL through HTTP/LDAP:

  • The CRL file cannot exceed 1 MB.
  • The CF card has sufficient space for storing the CRL file.

Example

# Configure the automatic update of the CRL through HTTP.
<HUAWEI> system-view
[~HUAWEI] pki domain domain1
[*HUAWEI-pki-domain-domain1] crl auto-update enable
[*HUAWEI-pki-domain-domain1] crl http
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >