HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 449

ProCurve# show crypto ca certificates
CA Certificate
Status: Available
Certificate Serial Number: 012d
Subject Name: /C=FI/O=SSH Communications Security/OU=Web test/CN=Test
CA 1
Issuer: /C=FI/O=SSH Communications Security/OU=Web test/CN=Test CA 1
CRL Dist. Pt: /C=FI/O=SSH Communications Security/OU=Web test/CN=Test
CA 1
Start date is Jan
End date is Dec 31 23:59:59 2003 GMT
Key Usage:
Self Certificate
Status: Available
Certificate Serial Number: 3f9fdcd9
Subject Name: /C=US/ST=CA/L=Roseville/CN=Router
Issuer: /C=FI/O=SSH Communications Security/OU=Web test/CN=Test CA 1
CRL Dist. Pt: /C=FI/O=SSH Communications Security/OU=Web test/CN=Test
CA 1
Start date is Oct 29 00:00:00 2003 GMT
End date is Dec
Key Usage:
Figure 8-12. Viewing Certificates
An up-to-date CRL is also very important. The CRL determines which certifi-
cates the router accepts from peers and thus determines which peers can
access the VPN.
Deleting Certificates. Follow this process to delete a certificate:
1. View the certificate using the show command.
2. Find the certificate's serial number.
3. Move to the global configuration mode context and access the certificate
chain command set for the corresponding CA profile:
Syntax: crypto ca certificate chain <profile name>
4. Delete the certificate:
Syntax: no certificate [ca <serial number> | <serial number>]
The ca keyword indicates that the serial number refers to a CA certificate. If
you want to delete a self certificate, enter the serial number without the ca
keyword.
9 16:25:15 2003 GMT
Use when deleting
1 00:00:00 2003 GMT
Virtual Private Networks
Configuring a VPN Using IPSec
Use when deleting
Router identification
8-63