Pki Validate-Certificate - HP MSR Series Command Reference Manual

crls: Specifies a storage path for the CRLs.
dir-path: Specifies a storage path, a case-sensitive string, which cannot start with a slash (/) or contains
two dots plus a slash (../). The dir-path argument specifies an absolute path or a relative path, and the
path must exist.
Usage guidelines
The specified storage path is a path on the active MPU rather than on other MPUs.
The default PKI directory on the device is automatically created when you successfully request, obtain, or
import a certificate for the first time.
If the path to be specified does not exist, you must use the mkdir command to create the path before using
this command. After you change the storage path for the certificates or CRLs, the certificate files (with the
file extension .cer or .p12) and CRL files (with the extension .crl) in the original path are moved to the new
path. The other types of files are not moved.
Examples
# Specifies flash:/pki-new as the storage path for the certificates.
<Sysname> system-view
[Sysname] pki storage certificates flash:/pki-new
# Specifies pki-new as the storage path for the CRLs.
<Sysname> system-view
[Sysname] pki storage crls pki-new

pki validate-certificate

Use pki validate-certificate to verify the validity of certificates.
Syntax
pki validate-certificate domain domain-name { ca | local }
Views
System view
Predefined user roles
network-admin
Parameters
domain domain-name: Specifies the name of a PKI domain, a case-insensitive string of 1 to 31 characters.
The domain name cannot contain the following special characters: tilde (~), asterisk (*), backslash (\),
vertical bar (|), colon (:), dot (.), left angle bracket (<), right angle bracket (>), quotation marks ("), and
apostrophe (').
ca: Specifies the CA certificate.
local: Specifies the local certificates.
Usage guidelines
Generally, certificates are automatically verified when you request, obtain, or import them, or when an
application uses PKI.
You can also use this command to manually verify a certificate to see whether it is issued by a trusted CA,
whether it expires, and whether it is revoked if CRL checking is enabled.
287