- Preface
- Using the WAAS Command-Line Interface
- Cisco WAAS Software Command Summary
- CLI Commands
- EXEC Mode Commands
- Global Configuration Mode Commands
- Interface Configuration Mode Commands
- Standard ACL Configuration Mode Commands
- Extended ACL Configuration Mode Commands
- Preposition Configuration Mode Commands
- PKI Certification Authority Configuration Mode Commands
- PKI Global Settings Configuration Mode Commands
- SSL Accelerated Service Configuration Mode Commands
- SSL Cipher List Configuration Mode Commands
- SSL Global Service Configuration Mode Commands
- SSL Host Peering Service Configuration Mode Commands
- SSL Management Service Configuration Mode Commands
- WCCP Configuration Mode Commands
- Service Context Configuration Mode Commands
- Service Node Group Configuration Mode Commands
- Service Node Configuration Mode Commands
- Service Context Configuration Mode Commands
- Class Map Configuration Mode Commands
- Policy Map Configuration Mode Commands
- Policy Map Class Configuration Mode Commands
- Acronyms and Abbreviations
- Command Summary by Mode
PKI Global Settings Configuration Mode Commands
To configure public key infrastructure (PKI) encryption global settings on a WAAS device, use the crypto pki global-settings global configuration command.
Syntax Description
Defaults
Command Modes
Device Modes
Usage Guidelines
Use the crypto pki global-settings command to configure OCSP and revocation checking. The crypto pki global-settings command initiates the global settings configuration mode, as indicated by the following prompt:
Within PKI global settings configuration mode, you can use PKI global settings commands to define PKI settings. To return to global configuration mode, enter exit at the PKI global settings configuration mode prompt.
Examples
The following example shows how to enter PKI global settings configuration mode:
Related Commands
(config-pki-global-settings) ocsp
To enter the URL to be used as the global settings for the Online Certificate Status Protocol (OCSP) protocol revocation status checking, use the ocsp global settings configurations mode command.
Syntax Description
Defaults
Command Modes
PKI global settings configuration
Device Modes
Examples
The following example shows how to define the OCSP URL as www.myocspurl.com:
Related Commands
(config-pki-global-settings) revocation-check
To configure the global settings revocation checking method, use the revocation-check command.
revocation-check {ocsp-cert-url | ocsp-url} [none]
Syntax Description
Defaults
Command Modes
PKI global settings configuration
Device Modes
Examples
The following example shows how to configure the global revocation checking to use the URL defined in the global OCSP settings:
The following example shows how to configure the global revocation checking use the URL defined in the global OCSP settings as the first method, and to use no checking as the second method:
Feedback