ca-certificate

Function

The ca-certificate command configures the CA certificate of an SSL uninstallation profile.

Format

ca-certificate ca-certification-file

Parameters

Parameter	Description	Value
ca-certification-file	Specifies the CA certificate.	The specified CA certificate must already exist.

Views

SSL uninstallation profile view

Default Level

2: Configuration level

Usage Guidelines

The CA certificate must be configured for enabling the client authentication function.

For SSL uninstallation, FW serves as the SSL server to implement certificate authentication on the specified client.

Import a CA certificate to the CF card first and then to the memory. Run the ca-certificate command to associate the CA certificate with the SSL uninstallation profile. The device uses the CA certificate to verify whether the certificate sent by the client is valid or not. The associated CA certificate cannot be deleted.

Example

# Set the CA certificate of SSL uninstallation profile abc to ca.pem.

<sysname> system-view
[sysname] slb
[sysname-slb] ssl-profile abc
[sysname-slb-ssl-profile-0] ca-certificate ca.pem