|
|
United States-English | |
|
|
 |
|
HP-UX IPSec version A.01.06 Administrator's Guide: HP-UX 11i Version 2 > Chapter 4 Using Certificates
with HP-UX IPSec
Retrieving the Certificate Revocation List (CRL) |
|
|
If you are using VeriSign or Baltimore certificates, you must add an entry to the root user’s crontab file, located in /var/spool/cron/crontabs/root to periodically retrieve the Certificate Revocation List (CRL) from the VeriSign or Baltimore Certificate Authority. Alternately, you can manually retrieve the CRL using ipsec_mgr. Add the following two lines to the root user’s crontab file. # Retrieve the CRL from the Certificate Authority (for HP-UX IPSec) [min] [hr] [mon_day] [month] [wkday] /var/adm/ipsec_gui/cron/crl.cron The fields in brackets are placeholders. Replace them with appropriate values when you enter the lines into the crontab file. For example, to retrieve the CRL every hour on the hour, add the following two lines and execute the crontab command to the root crontab file: # Retrieve the CRL from the Certificate Authority (for HP-UX IPSec) 0 * * * * /var/adm/ipsec_gui/cron/crl.cron. crontab /var/spool/cron/crontabs/root For more information regarding cron jobs and the crontab file format, refer to the cron(1M) and crontab(1) man pages. Add the following two lines to the root user’s crontab file. # Retrieve the CRL from the Certificate Authority (for HP-UX IPSec) [min] [hr] [mon_day] [month] [wkday] /var/adm/ipsec_gui/cron/baltimoreCRL.cron The fields in brackets are placeholders. Replace them with appropriate values when you enter the lines into the crontab file. For example, to retrieve the CRL every hour on the hour, add the following two lines and execute the crontab command to the root crontab file: # Retrieve the CRL from the Certificate Authority (for HP-UX IPSec) 0 * * * * /var/adm/ipsec_gui/cron/baltimoreCRL.cron. crontab /var/spool/cron/crontabs/root For more information regarding cron jobs and the crontab file format, refer to the cron(1M) and crontab(1) man pages. Use the following procedure to manually retrieve a CRL:
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 Printable version |
|
|
|
|
|
|||||||||||||||
|
|||||||||||||||
