pki Commands
716
E-DOC-CTC-20080409-0002 v2.0
pki crlconfig
PKI CRL configuration.
SYNTAX:
pki crlconfig [checking_enabled = <{disabled|enabled}>]
[use_expired_crls = <{disabled|enabled}>]
[dist_point1 = <quoted string>]
[fetch_dynamically = <{disabled|enabled}>]
[check_cert_extension = <{disabled|enabled}>]
[time_checking = <{disabled|enabled}>]
[net_timeout = <number>]
[http_proxy_address = <ip-address>]
[http_proxy_port = <number>]
where:
checking_enabled Enable/Disable CRL checking. OPTIONAL
use_expired_crls Allow certs with expired CRL entries. OPTIONAL
dist_point1 The URI to fetch CRL's from. The URI must
contain the IP address of the LDAP or HTTP
server.
OPTIONAL
fetch_dynamically Enable/Disable dynamic CRL retrieval. OPTIONAL
check_cert_extension Look for crlDistributionPoint extension. OPTIONAL
time_checking Enable/Disable the handling of time restrictions. OPTIONAL
net_timeout Define maximum retry period in seconds to
connect to external servers.
OPTIONAL
http_proxy_address IP address of HTTP proxy to use for CRL
retrieval. All zero means no proxy.
OPTIONAL
http_proxy_port HTTP proxy port. All zero means no proxy port. OPTIONAL