Table of Contents
Advertisement
118 Certificates and Client Authentication
3
4
Copyright © 2007-2008 Nortel Networks
.
Repeat this step for each serial number you want to add. To
display the serial number (along with subject information) for a
saved client certificate, use the /info/certs command.
Or, download and add your own CRL in ASCII format from a
remote machine.
>> Revocation# import
Select protocol (tftp/ftp/scp/sftp) [tftp]: ftp
Enter host or IP address of server: 192.168.128.20
(example)
Enter name of file on server (PEM, DER or ASCII format):
crl.ascii
Retrieving crl.ascii from 192.168.128.20
Received 12628 bytes in 0.1 seconds
Certificate revocation list found in ascii format
Revocation list added.
Use 'apply' to activate changes.
If you have added serial numbers for particular client certificates
by using the add command prior to using the import command,
you will be asked if you want to merge those serial numbers to
the CRL in ASCII format. If the CRL does not already include
those serial numbers, choose to merge them. However, make
sure that you update the original CRL with the merged serial
numbers before the next download, as you will otherwise lose
them. For more information about how to build your own CRL,
see
"Creating Your Own Certificate Revocation List" (page
Verify that the serial numbers of the client certificates you
want to revoke have been added.
>> Revocation# list
Revoked certificates:
Apply your changes.
>> Revocation# apply
Changes applied successfully.
Nortel VPN Gateway
User Guide
NN46120-104 02.01 Standard
14 April 2008
--End--
119).
Advertisement
Table of Contents
