HP Secure Key Manager - Manual (Page 266)

Related
command(s)
None
no crl list – renew all revoked certificates signed by a local CA or delete the CRL published by a
known CA.
Syntax
hostname (config)# no crl list <ca name>
When you use the no crl list command with a Known CA (as opposed to a local CA), the
SKM deletes the CRL published by that CA. When you use the no crl list command with a
local CA, the SKM renews all revoked certificates signed by that local CA.
Related
command(s)
None
show crl auto-update – check if the Auto–Update feature is enabled.
Syntax
hostname# show crl auto-update
Related
command(s)
None
show crl entry – check if a certificate is on a CRL.
Syntax
hostname# show crl entry <ca name> <serial number>
Related
command(s)
None
show crl list – display the serial number and revocation date of all revoked certificates in the CRL.
Syntax
hostname# show crl list
Related
command(s)
None
show crl settings – display the CRL settings for a CA.
Syntax
When you execute this command, the information you see should be similar to what
is shown here:
hostname# show crl settings
CA Name:
Thawte_Personal_Freemail_CA
CDP: ftp://crl.company.com/crl_update.crl
Next Update:
Nov 20 05:00:00 2008 PST
Username: admin
Related
command(s)
None
show crl status – display the general information associated with a CRL.
General information includes:
• Complete DN of the Issuer
• Last update and next update value for the CRL
• Signature algorithm for the CRL
Syntax hostname# show crl status <ca name>
Related
command(s)
None
266 Using the Command Line Interface