pki import-crl

Function

The pki import-crl command imports the CRL to the memory.

Format

pki import-crl [ realm realm-name ] filename file-name

Parameters

Parameter	Description	Value
realm realm-name	Specifies the PKI realm name.	The value must be an existing PKI realm name.
filename file-name	Specifies the name of an imported certificate or CRL file. The certificates only support PEM and DER formats.	The value must be an existing certificate or CRL file name.

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

To enable the CRL that is obtained in out-of-band mode or is updated manually, run this command to import the CRL to the memory.

Prerequisites

A PKI realm has been created using the pki realm (system view) command and the CRL file has been downloaded using HTTP or LDAP.

Precautions

Before importing a certificate or key pair, ensure that the certificate or key pair is stored in the specified directory (public directory on the root system and vsys directory on the virtual system). For example, the certificate or key pair is in the public directory of the root system:

<sysname> cd pki
<sysname> cd public/

Example

# Import the CRL in the PKI realm to the memory.

<sysname> system-view
[sysname] pki realm abc
[sysname-pki-realm-abc] quit
[sysname] pki http esc http://www.***.com\x3fpage1\\x3f abc.crl
[sysname] pki import-crl realm abc filename abc.crl