sys crypto cert-validator crl

sys crypto cert-validator crl(1)		  BIG-IP TMSH Manual		     sys crypto cert-validator crl(1)

NAME
       crl - Configures a CRL cert-validator.

MODULE
       sys crypto cert-validator

SYNTAX
       Configure the crl component using the syntax shown in the following sections.

   CREATE/MODIFY
	 create crl [name]
	 modify crl [name]
	   options:
	     internal-proxy [none | [string] ]
	     strict-revocation-check [disabled | enabled]
	 reset-stats crl [name]

   DISPLAY
	 list crl [name]
	 show crl [name]

   DELETE
	 delete server-ssl [all | [name]]
	   options:
	     recursive

DESCRIPTION
       You can use the crl component to create, modify, display or delete a custom CRL cert-validator.

EXAMPLES
       create cert-validator crl my_crl internal-proxy my_intp

       Creates a CRL cert-validator named my_crl using the internal proxy named my_intp.

OPTIONS
       internal-proxy
	    Specifies the internal proxy to define the route for reaching CRL distribution points to fetch CRL files.

       strict-revocation-check
	    If enabled, the certificate status won't be checked until the CRL fetching and caching is complete. If
	    disabled, the certificate status will be immediately considered as unknown if the CRL fetching and
	    caching is not complete yet. The default value is disabled.

SEE ALSO
       sys crypto cert-validator ocsp, sys internal-proxy

COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or by any means, electronic or
       mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
       other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2008-2010, 2017. All rights reserved.

BIG-IP						      2017-12-11		     sys crypto cert-validator crl(1)