trusted-ca (Services)
Syntax
trusted-ca (all | [ca-profile] );
Hierarchy Level
[edit services ssl proxy profile profile-name] [edit services ssl termination profile profile-name] [edit services ssl initiation profile profile-name]
Description
Specify the list of trusted certificate authority profiles.
Options
-
trusted-ca-name—Specify the certificate authority profile name.
-
all—Select all certificate authority profiles.
Note:
We have updated the limits for trusted CA certificates and server certificates limits to 400. This is changed from the previous limit of 1024.
In the reverse proxy configuration, ensure that combined size of server certificates and URL categories does not exceed 56,986 bytes. If the combined size exceeds the limit, the following error message is displayed during commit:
ERROR: Maximum blob size (56986 bytes) exceeded...current blob size is 57014 bytes. 400 Server certs are taking 54400 bytes, and 27 URL categories are taking 1728 bytes.
Required Privilege Level
services—To view this statement in the configuration.
services-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.1X44-D10.