220
Parameters
country-code-str
: Specifies a country code for the entity, a case-insensitive string of 2 characters.
Description
Use the
country
command to specify the code of the country to which an entity belongs. It is a standard
2-character code, for example, CN for China.
Use the
undo country
command to remove the configuration.
By default, no country code is specified.
Examples
# Set the country code of an entity to
CN
.
<Sysname> system-view
[Sysname] pki entity 1
[Sysname-pki-entity-1] country CN
crl check
Syntax
crl check
{
disable
|
enable
}
View
PKI domain view
Default level
2: System level
Parameters
disable
: Disables CRL checking.
enable
: Enables CRL checking.
Description
Use the
crl check
command to enable or disable CRL checking.
By default, CRL checking is enabled.
CRLs are files issued by the CA to publish all certificates that have been revoked. Revocation of a
certificate might occur before the certificate expires. CRL checking is intended for checking whether a
certificate has been revoked. A revoked certificate is no longer trusted.
Examples
# Disable CRL checking.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] crl check disable
crl update-period
Syntax
crl update-period
hours
undo crl update-period
