[Contents] [Prev] [Next] [Index] [Report an Error]

crl

See the following sections:

crl (Encryption Interface on M-series and T-series Routing Platforms Only)

Syntax



crl file-name;

Hierarchy Level



[edit security certificates]

Release Information

Statement introduced before JUNOS Release 7.4.

Description

Configure the certificate revocation list (CRL). A CRL is a time-stamped list identifying revoked certificates, which is signed by a CA and made available to the participating IPSec peers on a regular periodic basis.

Options

file-name—Specifies the file from which to read the CRL.

Usage Guidelines

See Configuring the Certificate Authority Properties.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration

crl (Adaptive Services Interfaces Only)

Syntax



crl {
disable on-download-failure;

refresh-interval number-of-hours;


url {

url-name;
password;
}


}

Hierarchy Level



[edit security pki ca-profile ca-profile-name revocation-check]

Release Information

Statement introduced in JUNOS Release 8.1.

Description

Configure the certificate revocation list (CRL). A CRL is a time-stamped list identifying revoked certificates, which is signed by a CA and made available to the participating IPSec peers on a regular periodic basis.

Options

disable on-download-failure—Permits the authentication of the IPSec peer when the CRL is not downloaded.
refresh-interval hours—Time interval, in hours, between CRL updates.
url url-name—Location from which to retrieve the CRL through the Lightweight Directory Access Protocol (LDAP). You can configure as many as three URLs for each configured CA profile.

Usage Guidelines

See Configuring the Certificate Revocation List.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration

[Contents] [Prev] [Next] [Index] [Report an Error]