Security
7450 ESS System Mangement Guide Page 155
The URL will be resolved by the DNS server configured (if configured) in the corresponding router
context.
If the service-id is 0 or omitted, then system will try to resolve the FQDN via DNS server configured
in bof.cfg. After resolution, the system will connect to the address in management routing instance
first, then base routing instance.
Note that if the service is VPRN, then the system only allows HTTP ports 80 and 8080.
Default none
Parameters url-string — Specifies the HTTP URL of the CMPv2 server up to 180 characters in length.
service-id service-id — Specifies the service instance that used to reach CMPv2 server.
Values service-id: 1..2147483647
base-router: 0
http-response-timeout
Syntax http-response-timeout timeout
no http-response-timeout
Context config>system>security>pki>ca-profile>cmp2
Description This command specifies the timeout value for HTTP response that is used by CMPv2.
The no form of the command reverts to the default.
Default 30 seconds
Parameters timeout — Specifies the HTTP response timeout in seconds.
Values 1 — 3600
response-signing-cert
Syntax response-signing-cert filename
no response-signing-cert
Context config>system>security>pki>ca-profile>cmp2
Description This command specifies a imported certificate that is used to verify the CMP response message if
they are protected by signature. If this command is not configured, then CA’s certificate will be used.
Default none
Parameters filename — Specifies the filename of the imported certificate.
To Next Page
Loading...
