234
Default
The CRL update period depends on the next update field in the CRL file.
Views
PKI domain view
Default command level
2: System level
Parameters
hours
: Specifies the CRL update period in hours, in the range of 1 to 720.
Examples
# Set the CRL update period to 20 hours.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] crl update-period 20
crl url
Use
crl url
to specify the URL of the CRL distribution point.
Use
undo crl url
to remove the configuration.
Syntax
crl url
url-string
undo crl url
Default
No CRL distribution point URL is specified.
Views
PKI domain view
Default command level
2: System level
Parameters
url-string
: Specifies the URL of the CRL distribution point, a case-insensitive string of 1 to 125
characters in the format of ldap://
server_location
or http://
server_location,
where
server_location
must be an IP address or a domain name.
Usage guidelines
When the URL of the CRL distribution point is not set, you should acquire the CA certificate and a
local certificate, and then acquire a CRL through SCEP.
Examples
# Specify the URL of the CRL distribution point.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] crl url ldap://169.254.0.30
