sys crypto cert-validator crl

sys crypto cert-validator crl(BIG-IP TMSH Manusys crypto cert-validator crl(1)



NAME
       crl - Configures a CRL cert-validator.

MODULE
       sys crypto cert-validator

SYNTAX
       Configure the crl component using the syntax shown in the following
       sections.

   CREATE/MODIFY
	 create crl [name]
	 modify crl [name]
	   options:
	     internal-proxy [none | [string] ]
	     strict-revocation-check [disabled | enabled]
	 reset-stats crl [name]

   DISPLAY
	 list crl [name]
	 show crl [name]

   DELETE
	 delete server-ssl [all | [name]]
	   options:
	     recursive

DESCRIPTION
       You can use the crl component to create, modify, display or delete a
       custom CRL cert-validator.

EXAMPLES
       create cert-validator crl my_crl internal-proxy my_intp

       Creates a CRL cert-validator named my_crl using the internal proxy
       named my_intp.

OPTIONS
       internal-proxy
	    Specifies the internal proxy to define the route for reaching CRL
	    distribution points to fetch CRL files.

       strict-revocation-check
	    If enabled, the certificate status won't be checked until the CRL
	    fetching and caching is complete. If disabled, the certificate
	    status will be immediately considered as unknown if the CRL
	    fetching and caching is not complete yet. The default value is
	    disabled.

SEE ALSO
       sys crypto cert-validator ocsp, sys internal-proxy

COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or
       by any means, electronic or mechanical, including photocopying,
       recording, or information storage and retrieval systems, for any
       purpose other than the purchaser's personal use, without the express
       written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2008-2010, 2017. All rights
       reserved.



BIG-IP				  2017-12-11  sys crypto cert-validator crl(1)