Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    revocation-check (Security PKI)

    Syntax

    revocation-check {crl {disable {on-download-failure;}refresh-interval hours;url url-name;}disable;ocsp {connection-failure (disable | fallback-crl);disable-responder-revocation-check;nonce-payload (enable | disable);url ocsp-url;}use-ocsp;}

    Hierarchy Level

    [edit security pki ca-profile ca-profile-name]

    Release Information

    Statement modified in Junos OS Release 8.5. Support for ocsp and use-ocsp options added in Junos OS Release 12.1X46-D20.

    Description

    Specify the method the device uses to verify the revocation status of digital certificates.

    Options

    The remaining statements are explained separately.

    Required Privilege Level

    security—To view this statement in the configuration.

    security-control—To add this statement to the configuration.

    Modified: 2016-07-06