certification user-cert-filter end-validity-time

Function

The certification user-cert-filter end-validity-time command sets the validity end date of client certificates.

The undo certification user-cert-filter end-validity-time command cancels the configuration of the validity end date of client certificates.

Format

certification user-cert-filter end-validity-time date time

undo certification user-cert-filter end-validity-time

Parameters

Parameter	Description	Value
date	Specifies the end date of the certificate validity.	The date is the GMT time in form of YYYY/MM/DD and the year ranges from 2000 to 2099. For example, if the time zone of the OS is set to GMT+08:00 (Beijing) and the end time of the certificate validity is 18:00:00 on May 22, 2009, the corresponding end time in GMT time is 10:00:00 on May 22, 2009.
time	Specifies the end time of the certificate validity.	The time is the GMT time in form of HH:MM:SS.

Views

Security view

Default Level

2: Configuration level

Usage Guidelines

If no validity end date is specified, the validity end date is regarded as infinite.

If certificates are used for authentication and authorization, the user needs to select a certificate when logging in to the virtual gateway. If there are many certificates, you may have difficulties in selecting one. You can set the validity start time and end time respectively through the certification user-cert-filter start-validity-time and certification user-cert-filter end-validity-time commands. Only certificates whose validity duration overlaps with the specified validity duration are displayed in the certificate list.

Example

# Set the validity end date of client certificates to February 3, 2009 and the end time to 02:03:04.

<sysname> system-view
[sysname] v-gateway gateway
[sysname-gateway] security
[sysname-gateway-security] certification user-cert-filter end-validity-time 2009/02/03 02:03:04