Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
PKI_1.3.6.1.4.1.2011.6.122.34.0.2.17 hwPKICrlNearlyExpired
Description
PKI/4/PKICRLNEARLYEXPIRED: OID [oid] the crl is nearly expired. (CrlIssuer=[crlissuer], CrlStartTime=[crlstarttime], CrlFinishTime=[crlfinishtime])
The CRL is about to expire.
Attribute
| Alarm ID | Alarm Severity | Alarm Type |
|---|---|---|
| 1.3.6.1.4.1.2011.6.122.34.0.2.17 | Warning | communicationsAlarm |
Parameters
| Name | Meaning |
|---|---|
| oid | Indicates the MIB object ID of the alarm. |
| crlissuer | Indicates the issuer of the CRL. |
| crlstarttime | Indicates the start time of the CRL. |
| crlfinishtime | Indicates the end time of the CRL. |
Possible Causes
The CRL is to expire. The CRL expiration time is less than 2 hours ahead of the current system time.
Procedure
- Run the display clock command to check whether the device time is correct.
If not, run the clock datetime command in the user view to change the device time.
- Obtain a new CRL. For details, see "Configuring Local Certificate Check" in S2720, S5700, and S6700 V200R019C10 Configuration Guide - PKI Configuration.