No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

OceanStor 18000 V3 Series V300R006

This document is applicable to OceanStor 18500 V3 and 18800 V3. Based on the CLI provided by DeviceManager, this document describes how to use various commands classified by functions and how to set the CLI and manage the storage system through these commands. The document that you browse online matches the latest C version of the product. Click Download to download documents of other C versions.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
import crl file

import crl file

Function

The import crl file command is used to import a new certificate revocation list.

Format

import crl file ip=? user=? password=? type=? crl_file=? [ protocol=? ] [ port=? ]

Parameters

Parameter

Description

Value

ip=?

IP address of the FTP/SFTP server.

-

user=?

User allowed by the FTP/SFTP server.

The value contains 1 to 64 characters without colons (:).

password=?

Password of a user allowed by the FTP/SFTP server, displayed as "*".

The value contains 1 to 64 characters.

type=?

Certificate revocation list type.

Possible values are:

  • "key_management_center": key management center.
  • "domain_authentication": domain authentication.
  • "hypermetro_arbitration": HyperMetro arbitration.
  • "domain_authentication_extension_1": domain authentication extension 1.
  • "domain_authentication_extension_2": domain authentication extension 2.
  • "domain_authentication_extension_3": domain authentication extension 3.

crl_file=?

Path for storing the certificate revocation list file on the FTP/SFTP server.

The value is a character string that ends with file name extension ".crl" (case insensitive).

protocol=?

Protocol used for transmitting the new certificate revocation list.

The value can be "FTP" or "SFTP" and the default value is "SFTP".

port=?

Port of the FTP/SFTP server.

The value is an integer ranging from 1 to 65535.

  • If protocol=FTP, the default value is "21".
  • If protocol=SFTP, the default value is "22".

Level

Administrator

Usage Guidelines

  • This command can be used to import a new certificate revocation list into the storage array from the FTP or SFTP server connected to the storage system.
  • This command supports that a new certificate revocation list can be imported based on application scenarios.
  • The certificate revocation list type supported by this command can be "key_management_center", "domain_authentication", "hypermetro_arbitration", "domain_authentication_extension_1", "domain_authentication_extension_2", or "domain_authentication_extension_3".
NOTE:

Prerequisites:

  • Storage systems can correctly access the FTP server or SFTP server over the network.
  • The FTP or SFTP service has been enabled on the server.
  • A directory has been created for storing the certificate revocation list.

Example

Import a certificate revocation list into the storage array and activate it.

admin/>import crl file ip=10.133.194.20 user=admin password=****** type=device_management  crl_file=test.crl protocol=SFTP port=22 
WARNING: You are about to import the certificate revocation list. This operation will revoke the certificate file and may cause the SSL connection failure. 
Suggestion: Before performing this operation, ensure that you accept the aforementioned risks and the certificate revocation list to be imported is correct. 
Have you read warning message carefully?(y/n)y 
Are you sure you really want to perform the operation?(y/n)y 
Command executed successfully.

System Response

None

Translation
Download
Updated: 2019-07-12

Document ID: EDOC1000138390

Views: 236597

Downloads: 150

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next