Specifications

3-768

Cisco Wide Area Application Services Command Reference

OL-21611-01

Chapter 3 CLI Commands

(config-ssl-mgmt) peer-cert-verify

To enable verification of peer certificates, use the peer-cert-verify command.

peer-cert-verify [revocation-check none]

Syntax Description

Defaults No default behavior or values.

Command Modes SSL management service configuration

Device Modes application-accelerator

central-manager

Usage Guidelines SSL peering service configuration parameters control secure communications established by the SSL

accelerator between WAE devices while optimizing SSL connections.

If peer certificate verification is enabled, WAAS devices that use self-signed certificates will not be able

to establish peering connections to each other and, thus, not be able to accelerate SSL traffic.

To disable OCSP certificate revocation checking, set the revocation check value to none.

Examples The following example shows how to enter SSL management service configuration mode, and then set

the revocation check method to none:

WAE(config)# crypto ssl management-service

WAE(config-ssl-mgmt)# peer-cert-verify revocation-check none

Related Commands (config) crypto ssl

revocation-check none Specifies a revocation check null method that returns revocation

success.