Release Notes

Usage Guidelines
Use the show crypto-local pki command to view all CRL and certificate status, OCSP client and OCSP
responder status and statistics.
Example
This example displays a list of all OCSP responder certificates on this controller.
(host) (config) #show crypto-local pki OCSPResponderCert
Certificates
------------
Name Original Filename Reference Count Expired
-------------- ----------------- --------------- -------
ocspJan28 ocspresp-jan28.cer 0 No
ocspresp-standalone-feb21 ocspresp-feb21.cer 0 No
ocsprespFeb02 ocspresp-feb2.cer 1 No
OCSPresponder1 ocspresponder-new1.cer 0 No
ocspresponder2 subsubCA-ocsp-res-2.cer 0 No
OCSPresponderlatest ocspresponder-latest.cer 0 No
The output of this command includes the following parameters:
Parameter Description
Name
Name of the OCSP responder certificate.
Original Filename
Name of the original certificate when it was added to the controller.
Reference Count
Number of RCPs that reference this OCSP responder certificate, signer
certificate or CRL.
Expired
Shows whether the controller has enabled or disabled client remediation with
Sygate-on-demand-agent.
This example shows the dates for which this OCSP responder certificate is valid.
(host) (config) #show crypto-local pki OCSPResponderCert ocspJan28 dates
notBefore=Jan 21 02:37:47 2011 GMT
notAfter=Jan 20 02:37:47 2013 GMT
This example displays the certificate’s hash number.
(host) (config) #show crypto-local pki OCSPResponderCert ocspJan28 hash 91dcb1b3
This example shows the purpose and information about this certificate.
(host) (config) #show crypto-local pki OCSPResponderCert ocspJan28 purpose
Certificate purposes:For validation
SSL client : No
SSL client CA : No
SSL server : No
SSL server CA : No
Netscape SSL server : No
Netscape SSL server CA : No
S/MIME signing : No
S/MIME signing CA : No
S/MIME encryption : No
S/MIME encryption CA : No
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide show crypto-local pki | 1244