Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    revocation-check

    Syntax

    revocation-check {disable;crl {refresh-interval number-of-hours;url {url-name;}}}

    Hierarchy Level

    [edit security pki ca-profile ca-profile-name]

    Release Information

    Statement introduced in Junos OS Release 8.1.

    Description

    Specify the method to verify revocation status of digital certificates for J Series Services Routers and Adaptive Services (AS) and MultiServices PICs installed in M Series and T Series routers.

    Options

    disable—Disable verification of status of digital certificates.

    crl—Only certificate revocation list (CRL) is supported. A CRL is a time-stamped list identifying revoked certificates, which is signed by a CA and made available to the participating IPsec peers on a regular periodic basis. By default, crl is enabled.

    The remaining statements are explained separately.

    Required Privilege Level

    admin—To view this statement in the configuration.

    admin-control—To add this statement to the configuration.

    Published: 2012-11-15