Specifications

3-729

Cisco Wide Area Application Services Command Reference

OL-21611-01

Chapter 3 CLI Commands

(config-ca) revocation-check

To configure the certification authority revocation checking method, use the revocation-check

command.

revocation-check {none | ocsp-cert-url | ocsp-url} [none | ocsp-cert-url | ocsp-url]

Syntax Description

Defaults No default behavior or values.

Command Modes certification authority configuration

Device Modes application-accelerator

central-manager

Examples The following example shows how to configure certification authority revocation checking to use the

URL defined in the global OCSP settings:

WAE(config)# crypto pki ca mycertauth

WAE(config-ca)# revocation-check ocsp-url

The following example shows how to configure revocation checking to use the URL defined in the global

OCSP settings as the first method, and to use no checking as the second method:

WAE(config)# crypto pki ca mycertauth

WAE(config-ca)# revocation-check ocsp-url none

Related Commands (config-ca) ca-certificate

(config-ca) description

none No revocation checking is used.

ocsp-cert-url Enables Online Certificate Status Protocol (OCSP) revocation status

checking using the CA server URL defined in the CA certificate.

ocsp-url Enables OCSP revocation status checking using the URL defined for the

global OCSP settings.