Ipsec Cert Crlconfig - THOMSON speedtouch 610 Cli Reference Manual

ipsec cert crlconfig

Show/set Public Key Infrastructure (PKI) Certificate Revocation List (CRL) configuration.
SYNTAX:
ipsec cert crlconfig
where:
checking_enabled
use_expired_crls
dist_point1
fetch_dynamically
check_cert_ extension
time_checking
net_timeout
http_proxy_address
http_proxy_port
E-DOC-CTC-20040210-0028 v3.0
[checking_enabled = <{disabled|enabled}>]
[use_expired_crls = <disabled|enabled}>]
[dist_point1 = <quoted string>]
[fetch_dynamically = <disabled|enabled}>]
[check_cert_extension = <disabled|enabled}>]
[time_checking = <disabled|enabled}>]
[net_timeout = <number>]
[http_proxy_address = <ip-address>]
[http_proxy_port = <number>]
Enable or disable CRL checking.
The default is disabled.
Allow (enabled) or do not allow (disabled) the use of certificates
with expired CRLs.
The default is disabled.
The Uniform Resource Identifier (URI) to fetch CRLs from. The
URI must contain the IP address of the Light-weight Directory
Access Protocol (LDAP) or the HyperText Transfer
Protocol (HTTP) server.
Enable or disable dynamic retrieval of CRLs.
The default is disabled.
Check (enabled) or do not check (disabled) the presence of CRL
Distribution Point extension.
The default is disabled.
Take (enabled) or do not take (disabled) time restrictions into
account.
The default is enabled.
A number between 0 and 999999999 (seconds).
Represents the maximum time to (re)try to connect to external
servers. The default is 10.
Specify 0 for an infinite retry period.
Note
Indicates the IP address of the HTTP proxy to use for CRL
retrieval.
Specifying 0.0.0.0 means that no proxy is to be used.
Note
Indicates the HTTP proxy port to use for CRL retrieval.
The default is 1080.
Specify 0 in case no proxy port is to be used.
Note
IPSec Commands
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
285