H3C SOHO IE4300, Справочник по командам

Страница: 2234 / 3296

45
Usage guidelines
The specified storage path must be on the master device.
If the path to be specified does not exist, use the
mkdir
command to create the path first.
Certificate files use the .cer or .p12 file extension. CRL files use the .crl file extension. After you
change the storage path for certificates or CRLs, the certificate files and CRL files in the original path
are moved to the new path.
Examples
# Specifies flash:/pki-new as the storage path for certificates.
<Sysname> system-view
[Sysname] pki storage certificates flash:/pki-new
# Specifies pki-new as the storage path for CRLs.
<Sysname> system-view
[Sysname] pki storage crls pki-new
pki validate-certificate
Use
pki validate-certificate
to verify the validity of certificates.
Syntax
pki validate-certificate domain domain-name { ca | local }
Views
System view
Predefined user roles
network-admin
Parameters
domain-name
: Specifies a PKI domain by its name, a case-insensitive string of 1 to 31 characters.
The domain name cannot contain the special characters listed in Table 17 .
Table 17 Special characters
Character name Symbol Character name Symbol
Tilde ~ Dot .
Asterisk * Left angle bracket <
Backslash \ Right angle bracket >
Vertical bar | Quotation marks "
Colon : Apostrophe '
ca
: Specifies the CA certificate.
local
: Specifies the local certificates.
Usage guidelines
Generally, certificates are automatically verified when you request, obtain, or import them, or when
an application uses PKI.
You can also use this command to manually verify a certificate in the following aspects:
•
Whether the certificate is issued by a trusted CA.
•
Whether the certificate has expired.