Pki Validate-Certificate; Root-Certificate Fingerprint - H3C MSR 20-20 Command Reference Manual

2062 C 134: PKI C
HAPTER

pki validate-certificate

Syntax
View
Parameter
Description
Related command:
Example

root-certificate fingerprint

Syntax
View
Parameter
Description
C
ONFIGURATION OMMANDS
pki validate-certificate { ca | local } domain domain-name
System view
ca: Validates the CA certificate.
local: Validate the local certificate.
domain-name: Name of the PKI domain the certificate to be validated is for, a
string of 1 to 15 characters.
Use the
pki validate-certificate
The focus of certificate validity verification is to check that the certificate is signed
by the CA and that the certificate has neither expired nor been revoked.
pki domain.
# Verify the validity of the local certificate.
<Sysname> system-view
[Sysname] pki validate-certificate domain 1
root-certificate fingerprint { md5 | sha1 } string
undo root-certificate fingerprint
PKI domain view
md5: Uses an MD5 fingerprint.
sha1: Use a SHA1 fingerprint.
string: Fingerprint to be used. An MD5 fingerprint must be a string of 32
characters in hexadecimal. A SHA1 fingerprint must be a string of 40 characters in
hexadecimal.
Use the
root-certificate fingerprint
be used for validating the CA root certificate.
Use the undo root-certificate fingerprint
configuration.
By default, no fingerprint is configured for validating the CA root certificate.
command to verify the validity of a certificate.
command to configure the fingerprint to
command to remove the