certification cert-challenge cert-field

Function

The certification cert-challenge cert-field command sets the certificate fields extracted as the user name during the certificate challenge authentication.

Format

certification cert-challenge cert-field user-filter { issuer | subject } { cn | ou | o | l | st | c | email } [ group-filter { issuer | subject } { cn | ou | o | l | st | c | email } ]

certification cert-challenge cert-field user-filter [ issuer | subject ] { cn | ou | o | l | st | c | email } group-filter { version | serialnum | notbefore | notafter }

certification cert-challenge cert-field user-filter { version | serialnum | notbefore | notafter } [ group-filter { issuer | subject } { cn | ou | o | l | st | c | email } ]

certification cert-challenge cert-field user-filter { version | serialnum | notbefore | notafter } group-filter { version | serialnum | notbefore | notafter }

Parameters

Parameter	Description	Value
user-filter	Indicates the user name filtering field.	-
group-filter	Indicates the group name filtering field.	-
issuer \| subject \| version \| serialnum \| notbefore \| notafter	Specifies the master field.	The default value is subject.
cn \| ou \| o \| l \| st \| c \| email	Indicates the sub field.	The default value is cn.

Views

Security view

Default Level

2: Configuration level

Usage Guidelines

None

Example

# Set the certificate fields extracted as the user name during the certificate challenge authentication. The certificate master field and sub field of the user name are issuer and c respectively.

<sysname> system-view
[sysname] v-gateway gateway
[sysname-gateway] security
[sysname-gateway-security] certification cert-challenge cert-field user-filter issuer c