Pki Validate-Certificate - H3C MSR Series Command Reference Manual

undo pki storage { certificates | crls }
Default
Certificates and CRLs are stored in the PKI directory on the storage media of the device. The PKI
directory is automatically created when a certificate is successfully requested, obtained, or imported
for the first time.
Views
System view
Predefined user roles
network-admin
Parameters
certificates: Specifies a storage path for certificates.
crls: Specifies a storage path for CRLs.
dir-path: Specifies a storage path, a case-sensitive string, which cannot start with a slash (/) or
contain two dots plus a slash (../). The dir-path argument specifies an absolute path or a relative
path, and the path must exist.
Usage guidelines
On centralized devices in IRF mode, the specified storage path must be on the master device.
On distributed devices in standalone mode, the specified storage path must be on the active MPU.
On distributed devices in IRF mode, the specified storage path must be on the global active MPU.
If the path to be specified does not exist, use the mkdir command to create the path first.
Certificate files use the .cer or .p12 file extension. CRL files use the .crl file extension. After you
change the storage path for certificates or CRLs, the certificate files and CRL files in the original path
are moved to the new path.
Examples
# Specifies flash:/pki-new as the storage path for certificates.
<Sysname> system-view
[Sysname] pki storage certificates flash:/pki-new
# Specifies pki-new as the storage path for CRLs.
<Sysname> system-view
[Sysname] pki storage crls pki-new

pki validate-certificate

Use pki validate-certificate to verify the validity of certificates.
Syntax
pki validate-certificate domain domain-name { ca | local }
Views
System view
Predefined user roles
network-admin
Parameters
domain-name: Specifies a PKI domain by its name, a case-insensitive string of 1 to 31 characters.
The domain name cannot contain the special characters listed in
496
Table 75.