crl

Function

The crl command configures the Certificate Revocation List (CRL) of an SSL uninstallation profile.

The undo crl deletes the configured CRL.

Format

crl crl-file

undo crl

Parameters

Parameter	Description	Value
crl-file	Specifies a CRL.	The specified CRL must already exist.

Views

SSL uninstallation profile view

Default Level

2: Configuration level

Usage Guidelines

For SSL uninstallation, FW serves as the SSL server to implement certificate authentication on the specified client.

Import a CRL to the CF card first and then to the memory. Run the crl command to associate the CA certificate with the SSL uninstallation profile. The device verifies the validity of the CA certificate based on whether it is in the CRL or not. The associated CRL cannot be deleted.

Example

# Set the CRL file of SSL uninstallation profile abc to abc.crl.

<sysname> system-view
[sysname] slb
[sysname-slb] ssl-profile abc
[sysname-slb-ssl-profile-0] crl abc.crl