428
Examples
# Obtain CRLs from the CRL repository.
<Sysname> system-view
[Sysname] pki retrieve-crl domain aaa
Related commands
crl url
ldap server
pki storage
Use
pki storage
to specify the storage path for the certificates or CRLs.
Use
undo pki storage
to restore the default.
Syntax
pki storage
{
certificates
|
crls
}
dir-path
undo pki storage
{
certificates
|
crls
}
Default
Certificates and CRLs are stored in the
PKI
directory on the storage media of the device. The
PKI
directory is automatically created when a certificate is successfully requested, obtained, or imported
for the first time.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
certificates
: Specifies a storage path for certificates.
crls
: Specifies a storage path for CRLs.
dir-path
: Specifies a storage path, a case-sensitive string, which cannot start with a slash (/) or
contain two dots plus a slash (../). The
dir-path
argument specifies an absolute path or a relative path,
and the path must exist.
Usage guidelines
(In standalone mode.) The specified storage path must be on the active MPU.
(In IRF mode.) The specified storage path must be on the global active MPU.
If the path to be specified does not exist, use the
mkdir
command to create the path first.
Certificate files use the .cer or .p12 file extension. CRL files use the .crl file extension. After you
change the storage path for certificates or CRLs, the certificate files and CRL files in the original path
are moved to the new path.
Examples
# Specifies
flash:/pki-new
as the storage path for certificates.
<Sysname> system-view
[Sysname] pki storage certificates flash:/pki-new
# Specifies
pki-new
as the storage path for CRLs.
